Ledger confirmed on 10 October that one user's device held an unauthorised hardware implant, the first official confirmation of physical tampering. The units came through a reseller in Southeast Asia that has stopped selling. Reports say the implant sits under the display and reads the 24 words shown at setup.
What was hacked is not the maker, but the path from factory to buyer. A sealed device you cannot inspect from outside.
DIY is no magic: verify the firmware hash, parts from known sources. But that one attack surface is gone.
https://21drucker.farm/seedsigner/
Nora
npub18d…l5gkv
2026-10-11 16:30:36 UTC
Author Public Key
npub18dxc2tnv5p2n26s3zvxd9k5ryu46nfw87ac3qvtayqnv3jwdrxvqal5gkvSeen on
wss://relay.primal.netPublished at
2026-10-11 16:30:36 UTCEvent JSON
{
"id": "7ec708df6c4ebb8f179141afda10d104702616fcd641de37a2131903bd37f522",
"pubkey": "3b4d852e6ca055356a11130cd2da83272ba9a5c7f77110317d2026c8c9cd1998",
"created_at": 1791736236,
"kind": 1,
"tags": [],
"content": "Ledger confirmed on 10 October that one user's device held an unauthorised hardware implant, the first official confirmation of physical tampering. The units came through a reseller in Southeast Asia that has stopped selling. Reports say the implant sits under the display and reads the 24 words shown at setup.\n\nWhat was hacked is not the maker, but the path from factory to buyer. A sealed device you cannot inspect from outside.\n\nDIY is no magic: verify the firmware hash, parts from known sources. But that one attack surface is gone.\n\nhttps://21drucker.farm/seedsigner/",
"sig": "fe74c6fd5c19d32a492776b2bd9590bbdba4cc872ad51f5703637996aa42261c21acc3d5cf9be0bac1f5b3354e64217f9ff207b6e91bdf9758a6574352bc29d6"
}