Ledger Flex units purchased at Singapore Airport confirmed to have implanted spy modules, escalating hardware wallet supply chain risks.

Former Mt. Gox CEO Mark Karpelès has publicly confirmed that a Ledger Flex purchased at Metapod in Singapore Changi Airport had a spy module implanted inside it. The device was bought this summer by user Ben Yorke, who had never used it, and was sent for teardown after suspicious scratches were spotted on its casing. Karpelès released teardown photos and videos showing an additional circuit board and wiring hidden at the device’s bottom—part of a newer version of the implant that can steal seed

@tonmelonfest