Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?

Sophisticated supply chain attacks on Ledger hardware wallets involve malicious implants designed to capture seed phrases during initial setup. These custom-built modules, which include integrated eSIMs for data exfiltration, have facilitated the theft of over $100 million in cryptocurrency, primarily targeting users in Southeast Asia. While Ledger has acknowledged the compromise of specific resellers, reports of tampered devices in Europe suggest a broader, evolving threat. Security experts Mark Karpolis and Jonty advise users to manually inspect their devices for unauthorized hardware, as these implants are physically detectable. This incident underscores the inherent risks within the authorized reseller network and emphasizes the critical need for enhanced supply chain scrutiny and individual vigilance in self-custody practices. Despite the severity of these breaches, hardware wallets remain a primary defense against malware-driven theft, provided users source devices directly from manufacturers and exercise caution during setup.