Ledger Confirms Supply Chain Attack on Hardware Wallets
Oct 15, 2026
Ledger confirms criminals planted seed-stealing components in genuine wallets sold through resellers, and is rolling out new reseller security checks in response.
Hardware Wallets Aren't Always Safe Out of the Box
Ledger just confirmed something pretty unsettling: criminals managed to slip tampered components into genuine hardware wallets before they even reached customers. The modified devices were built to quietly leak recovery phrases, which is exactly the one thing that's supposed to keep your crypto safe no matter what.
The attack apparently happened somewhere along the reseller chain, not inside Ledger's own factory. That's an important distinction, but it doesn't make the news any less scary if you bought a wallet from the wrong place at the wrong time.
What Ledger Is Doing About It
In response, Ledger announced new security checks for its reseller network, aimed at making it much harder for anyone to intercept and modify devices before they reach buyers.
The takeaway here isn't "stop using hardware wallets." It's buy directly from Ledger or an authorized seller, check the tamper seals, and never type your recovery phrase into a device that already shows one. Basic hygiene still beats most attacks.