Singapore police said on Oct 28 that some Ledger hardware wallets bought from local retail stores contained malicious hardware implants that could capture recovery phrases or private keys, with at least two cases since Sept 10 and about S$3.5 million in losses (police advisory).

Singapore police said on Oct 28 that some Ledger hardware wallets bought from local retail stores contained malicious hardware implants that could capture recovery phrases or private keys, with at least two cases since Sept 10 and about S$3.5 million in losses (police advisory).

Police said unauthorized persons could then move assets without consent, that it is in contact with Ledger, and that investigations are ongoing; it advised users to stop using suspected devices, not enter recovery phrases or transact on them, and contact official support.

The warning spread after WuBlockchain's summary, which cz_binance quoted on Oct 29 saying the Singapore supply chain was compromised and urging extra care, and BitcoinArchive also warned of a compromised supply chain.

Defiprime adds that Ledger described seed-stealing implants, asked authorized resellers and distributors to suspend sales in Southeast Asia and Hong Kong, told retailers to keep stock off shelves and never resell returns, and said it is working with law enforcement to trace funds.