12/10/2026
A hardware wallet reseller in this region has been linked to Ledger devices that were opened, fitted with a hidden module and resealed before reaching the buyer. The module read the recovery words off the screen during setup. Around 311 wallets were emptied, most of it inside an hour.
Two things are worth knowing. The reseller was an authorised one, for six brands, for four years. And Ledger's built-in authenticity check did not catch it, because that check verifies the secure element, and the secure element was genuine. The implant sat on the wiring to the screen.
So the usual advice, buy authorised and run the check, failed at the same time.
Where ours come from: directly from the official channel for each brand we carry, and nothing we have sold has passed through the reseller involved. We do not sell returned or opened units. Every order can be collected in person in Singapore and we can open the box together with you.
If you bought any hardware wallet from a regional reseller in the last 90 days, do not set it up. If you already did, move your funds to a verified device with a newly generated phrase, and never reuse the old words.
More detail, including where the other brands stand:
Our position on the Ledger devices tampered with at a regional reseller: where our stock comes from, and what to do if you bought one in the last 90 days.