Ledger Nano X Spy Implant (2025–2026)
A supply-chain hardware implant campaign against Ledger Nano X wallets: a second computer hidden inside a genuine device taps the unencrypted SPI bus between the secure element and the OLED screen, reads the 24-word recovery phrase as it is displayed during setup, and exfiltrates it over its own cellular modem. First publicly reported in August 2025 and reverse-engineered by Joe Grand (Grand Idea Studio, hardwear.io USA 2026), the implant passed through three documented generations in about a year — from a hand-soldered prototype to a colour-matched, mass-installable flex PCB with scraped chip markings. The campaign surfaced publicly on 9 October 2026, when Ledger opened an investigation into wallet drains linked to CryptoBilis, an authorized reseller in Malaysia, Indonesia, and the Philippines; independent loss estimates cluster around ~$86–93 million.1 2
The mechanism: attack the bus, not the chip
The Nano X keeps its seed inside a secure element (SE) built to resist laboratory attack. But the seed must leave the SE exactly once — when the device displays the 24 recovery words during setup — and it travels to the OLED over a plain SPI bus (SCLK, MOSI, DC) that is neither encrypted nor authenticated. The implant is a small add-on computer soldered inside a genuine device: it passively monitors that bus, template-matches the pixel traffic against stored letter glyphs, reconstructs the words, stores them to flash, and transmits them over its own LTE modem, eSIM, and antenna. The SE is never attacked; the device works normally; Ledger’s Genuine Check still passes, because the secure element really is genuine. Nothing is visible from outside the case.3
Tibane Labs’ capture of the display bus replays the screen exactly from the decoded bytes — the recovery words travel the same three wires, unencrypted. Their rule: a recovery phrase ever displayed on a device of uncertain origin must be treated as leaked, even if the device was never connected to anything. The only fix is a new seed generated on a trusted device, with funds moved to it — reusing the old phrase on a new device leaves the attacker’s copy valid.4
Three generations, one method
| Gen 1 (Aug 2025 – May 2026) | Gen 2 (Sept 2026, Yahoo! Auctions JP) | Gen 3 (Sept 2026, Amazon JP) | |
|---|---|---|---|
| Tap | Enamelled wire bundle to OLED SPI | Kapton flex soldered to factory test pads (GND, VBAT, SPI) | Black-coated flex hidden beneath the OLED |
| MCU | Unmarked Cortex-M0+ (QFN-20) | STM32G431KBU6 (Cortex-M4), markings intact | QFN, markings scraped off |
| Radio | Luat Air700E LTE + MFF2 eSIM (Vodafone NL data-only profile) | Shielded LTE module + 2×2 mm eSIM | Nordic nRF9151 (LTE-M / NB-IoT) + scraped MFF2 eSIM |
| Antenna | 8 cm hand-wound coil | Flat antenna taped over battery and modem | Custom flex antenna silkscreened AC-A2016-NANO-V1.1 |
| Battery | Shrunk (70 mAh), gauge bypassed (always reads 100%) | Shrunk, unmarked, no protection circuit | Original, untouched — room taken from the OLED foam pad |
| Installation | Hand-wired | Anchor solder joints carrying no signal | Keyed to the board’s own parts — drops into place |
Every generational change removes something an owner could spot with the case open; the method never changes. The tells that remain: a thin antenna wire along the top edge, a too-small or always-100% battery, missing OLED foam padding, a 10 kΩ resistor standing in for the battery thermistor (Gen 1–2).5
Gen 3 is the production design: a panelised, board-house flex PCB keyed to the Ledger’s own surface-mount parts (the placement jig is built into the implant), a custom antenna already at revision 1.1, colour-matched coating, abraded part numbers. Tibane’s assessment: planning, a real budget, and a goal of mass production — not a hobbyist build. Date codes on the Gen 2 MCU (week 51, 2025) and the Gen 3 modem (week 39, 2025) both post-date the first public report, so the campaign continued and professionalized after exposure.6
The CryptoBilis investigation (Oct 2026)
- Oct 9 — Ledger opens an investigation into stolen-funds reports tied to devices sold through CryptoBilis, asks the reseller to halt all sales and shipments, and advises buyers of the last 90 days: do not set up an uninitialized device; if already set up, move assets to a new device with a newly generated phrase.7
- Oct 10 — Ledger confirms “an unauthorized hardware implant” in at least one affected user’s device, says its own infrastructure was not compromised, and reports no incidents involving devices bought directly from Ledger.8
- Oct 11–12 — Ledger ties all drain reports to CryptoBilis-sold devices (volume described as “limited”). CryptoBilis’s former co-founders state they sold the company earlier in 2026, completed the handover in March 2026, and have held no access or visibility since; per their statement, the acquisition’s public announcement was contractually held until mid-October 2026.9
Loss estimates (unconfirmed; methodologies and address sets differ). Galaxy’s Alex Thorn (Oct 9): ~$91M across 477 addresses — Tron $64.5M (incl. ~64.3M USDT), Bitcoin $17.7M (~213 BTC), Ethereum networks $8.8M. Bitquery (updated Oct 11): $93.2M from 315 wallets across six chains, with 25 Tron wallets signing the same token approval within three seconds (~$29M USDT withdrawn) and roughly two weeks of small test transactions beforehand — a coordinated withdrawal executed Oct 9; Tether froze ~$10M of the USDT; $5.35M in USDC was traced through Tornado Cash and Zcash. Earlier on-chain estimates cited by Tibane: Specter >$86M; tanuki42 >$72M tied to eight addresses. Neither estimate counts tampered devices, and Ledger has confirmed neither a figure nor a cause.10 11
The Malaysia thread. Tibane’s Gen 3 specimen came from a China-based seller on Amazon Japan, shipped from Malaysia; CryptoBilis is Malaysia-based and reportedly passed in August 2026 to a shareholder with an address in China (per unverified registry screenshots). Tibane is explicit that specimen B was not bought from CryptoBilis, that it has tested no CryptoBilis device, and that the ownership change is not itself evidence of wrongdoing — while noting that a Malaysia-based implant operation plus a reseller acquired as a distribution channel would fit every observation. Ledger has not named a cause.12
The Trezor Safe 5 report (Oct 2026)
The reseller line reaches a second vendor. On 30 October 2026 Trezor warned of a suspected implant in a Safe 5 bought from CryptoBilis through Tokopedia in August 2026: an Indonesian buyer opened the device and found an extra circuit board between the main board and the screen, carrying a cellular module and antenna. Per the buyer’s unconfirmed report, it reads information displayed on the screen — including the wallet recovery phrase — and transmits over a mobile network whenever the device is plugged in. Trezor calls the report credible, has not yet examined the device, and says no related losses are known; it removed CryptoBilis from its reseller network on 9 October, before any sign it was affected, and announced a tightening of reseller controls globally.13
The guidance matches this page’s response rule exactly: affected buyers — any model supplied by CryptoBilis from March 2026 onward, including stock carried by other retailers — should move funds to a newly created wallet with a newly generated phrase, since restoring the existing backup elsewhere leaves the attacker’s copy valid if the phrase was captured. Trezor adds that weighing devices is not a reliable tamper check. A Singapore police statement added roughly $3.5M to the Ledger incident’s loss tally.14
The method generalizes across vendors: the Ledger implant taps the unencrypted SE→OLED SPI bus, while the Trezor report describes a board reading the screen itself — in both cases the phrase-in-display is the asset, and the rule “a recovery phrase ever displayed on a device of uncertain origin must be treated as leaked” applies to both.
Why attestation didn’t help
Genuine Check attests the secure element — one component. The implant lives outside the checked boundary, on the wires the SE must use to talk to its owner, and Ledger’s own documentation concedes the check cannot detect added hardware when the SE remains intact. The failure shape recurs across the wiki: COLDCARD’s link-time fallback had five safeguards, none testing the property that mattered; OPC UA is secure by design and insecure by configuration. Here the checked component passes and the system fails around it. Distribution makes it worse: Tibane’s specimens arrived through ordinary resale — a tenbaiyā relister on Yahoo! Auctions and a third-party seller on Amazon Japan — so “buy from authorized channels” is necessary but not sufficient once compromised stock circulates in the secondary market.15 16
What protects users
- Channel: buy direct from the manufacturer; treat any marketplace or reseller device as uncertain origin. Ledger’s investigation found no cases involving devices bought direct.
- Inspection: the remaining tells are internal (antenna wire, missing OLED foam, battery anomalies) — Gen 3 defeats shrink-wrap and casual inspection by design.
- Response: a device never set up has leaked nothing; a device already set up on uncertain origin must be treated as exposed — new seed on a trusted device, move the funds, never reuse the old phrase.
- Architecture: as in the COLDCARD sweep (zero satoshis lost from diverse-vendor multisig), removing the single point of failure beats inspecting for it — one compromised vendor’s seed ceremony cannot drain a 2-of-3.
Related concepts
- weak-entropy-key-generation — the sibling failure mode: weak generation makes keys predictable, this implant makes them observed. Both are broken at birth, invisible at the output, and retroactive.
- coldcard-entropy-incident-2026 — the other 2026 hardware-wallet mass theft; Galaxy’s Thorn ran loss estimation in both.
- hd-wallet-derivation-paths — one displayed seed compromises the entire derived tree on every chain.
- key-transparency — attestation answers “is this component genuine?”, not “is this device only what it claims to be.”
- web3-identity — a wallet is a key pair; custody risk transfers to the hardware and the retail channel.
- model-backdoors — the weights-layer supply-chain counterpart: a planted, trigger-activated behavior inside an artifact that passes its checks.
- unwanted-location-tracking — the consumer-scale hidden-tracker case: tracking hardware concealed in the victim’s belongings, working only while its safety feature (the separation chirp) is subvertible.
- common-mode-failure — diverse-vendor multisig works only when the failure domains are actually independent; a shared reseller, factory, or shipment can defeat nominally separate devices
- gongkai — a capability analogy, not attribution: informal hardware networks and cheap flex-board production can supply the manufacturing sophistication visible in Gen 3
Sources
- Tibane Labs 2026 — Ledger Nano X: the spy implant
- Bill Toulas 2026 — Ledger confirms spy chip implant behind wallet crypto thefts
- Oluwapelumi Adejumo 2026 — Ledger wallet implant exposes a gap in its authenticity check
- Bill Toulas 2026 — Trezor warns of suspected crypto-theft implant in hardware wallet
Footnotes
-
Oluwapelumi Adejumo 2026 — Ledger wallet implant exposes a gap in its authenticity check ↩
-
Bill Toulas 2026 — Ledger confirms spy chip implant behind wallet crypto thefts ↩
-
Oluwapelumi Adejumo 2026 — Ledger wallet implant exposes a gap in its authenticity check ↩
-
Bill Toulas 2026 — Trezor warns of suspected crypto-theft implant in hardware wallet ↩
-
Bill Toulas 2026 — Trezor warns of suspected crypto-theft implant in hardware wallet ↩
-
Oluwapelumi Adejumo 2026 — Ledger wallet implant exposes a gap in its authenticity check ↩