Updated: October 16, 2026
Reports of suspected tampering involving hardware cryptocurrency wallets highlight why buyers should consider supply-chain security as well as device features. The details matter: a report of suspicious devices from a reseller is not proof that every product from a manufacturer is compromised.
What has been reported?
The Verge reported on October 11 that users described unauthorized cryptocurrency losses and that tampering involving hardware wallets sold through reseller CryptoBillis was being investigated. The report said Ledger asked the reseller to suspend sales while the matter was examined. Readers should consult Ledger’s own security updates for any confirmed product-specific guidance.
Source: The Verge — Ledger wallet tampering suspected after reports of crypto thefts.
How to reduce hardware-wallet supply-chain risk
- Buy directly from the manufacturer or an authorized seller and verify the seller with the manufacturer.
- Follow the manufacturer’s official setup process and verify device authenticity using its official tools where available.
- Never use a recovery phrase that came printed in a package or was supplied by a seller; generate it during secure setup as directed by the manufacturer.
- Never type a recovery phrase into a website, email, chat, or customer-support form.
- If a device appears modified or behaves unexpectedly, stop using it and contact official support through a verified website.
What to do if you suspect a compromised device
Do not enter your recovery phrase into the suspicious device or a web page. Use the manufacturer’s official security guidance and, where appropriate, a known-clean device to move funds to a new wallet created securely. Consider professional help if substantial funds may be affected.
Bottom line
Wallet security depends on safe purchasing, secure setup and protection of recovery phrases. Wait for confirmed findings before generalizing from an ongoing investigation.
This article is for security awareness only and is not financial advice. Follow official manufacturer guidance for current incident response.