Security· ★★★★· bearish·

Tampered Ledger Nano X sold in Thailand hid 4G module and eSIM to steal seed phrases

  • —The implant sniffs the 24-word seed via the SPI bus between the secure chip and display
  • —The 4G LTE Cat 1 module and eSIM were registered via Vodafone in the Netherlands
  • —Grand bought and tested three more units on Lazada — all were tampered with
  • —Devices were sold through stores mimicking official resellers such as TH Ledger
Why it matters: A supply-chain attack on hardware wallets undermines trust in self-custody and could push investors toward spot bitcoin ETFs.
Source: Siam Blockchain