Security· ★★★★· bearish·

Ex-Mt.Gox CEO finds spy implant inside Ledger Nano X bought on Amazon

  • —Karpelès bought the Nano X on Amazon Japan from a China-based seller, shipped from Malaysia
  • —The implant uses an LTE module, antenna, eSIM and a microcontroller tapped into the screen's SPI bus
  • —It captures the 24-word recovery phrase during initial setup and transmits it externally
  • —Tibane Labs obtained two such Nano X units in September, from Yahoo! Auctions and Amazon Japan
Why it matters: It confirms the risk of physically tampered hardware wallets: Ledger's Genuine Check cannot detect an added implant if the secure element is genuine.
Source: CoinPost
More on this
Security · yesterday
Mark Karpelès finds new spy implant in Ledger Flex bought in Singapore
 Security · Oct 10
Ex-Mt. Gox chief finds spy chip inside sealed Ledger wallet
 Security · Oct 12
Ledger finds spy implant in wallets as XRP closes 2015 code flaw