Supply Chain Vulnerabilities Found in Ledger Hardware Wallets

Background

Crypto losses were reported involving Ledger devices sold through CryptoBilis, a reseller listed as authorized in Indonesia, Malaysia, and the Philippines. Ledger confirmed that one affected device contained an unauthorized implant.

Malicious Implants

Malicious implants in Ledger wallets captured users' recovery phrases and transmitted them over cellular networks. This highlights concerns over the middlemen handling devices before they reach buyers, even through authorized sellers.

Expert Opinions

Crypto analyst Mati Greenspan said that he has never used a hardware wallet despite being involved in the industry since 2013, seeing little value in adding another chain of trust. Nick Neuman, CEO of Bitcoin security company Casa, suggested that users should spread their risk across multiple providers rather than rely on just one. Trezor, a rival of Ledger, said its devices undergo authenticity checks and accept only signed firmware, but acknowledged that these protections cannot rule out physical tampering.

Solutions

Security researcher Joe Grand suggested several physical design changes, from transparent casings that expose internal components to tamper-resistant enclosures that would force attackers to recreate the housing to conceal modifications. He also pointed to anti-tamper design recommendations from electronics engineer Dave Jones.

Conclusion

The recent report has highlighted the need for manufacturers to take steps to prevent supply-chain attacks. Experts warn that users cannot realistically detect sophisticated tampering with hardware wallets, and that manufacturers must prioritize security in their design and testing processes.