Ledger confirms tampered Nano X wallets with hidden eSIM implants were used to steal users’ crypto recovery phrases

Security researchers found modified Ledger Nano X wallets containing a concealed chip and eSIM that could capture and transmit users’ recovery phrases. Ledger said the affected devices were physically tampered with before reaching victims, not compromised through a flaw in genuine wallets.

The case highlights the growing risk of supply-chain attacks against crypto hardware, especially when devices are bought from unofficial or secondhand sources. As wallets become high-value targets, buyers may increasingly demand stronger tamper-evidence, provenance checks, and secure setup flows.