Singapore police have reported at least two cases involving tampered Ledger hardware wallets since September 10, resulting in combined losses of approximately 3.5 million Singapore dollars ($2.7 million). In an advisory published on Wednesday, the Singapore Police Force stated that preliminary investigations identified malicious hardware components within Ledger devices purchased from specific retail stores in the country. This local disclosure places these incidents nearly a month before the broader issue became public knowledge on October 9, when reports emerged regarding losses linked to devices sold through CryptoBilis, an authorized Ledger reseller operating in Indonesia, Malaysia, and the Philippines.
The investigation highlights concerns over supply chain integrity, with former Mt. Gox CEO Mark Karpelès noting that a Ledger Flex purchased at Singapore’s airport contained a spy implant. Additionally, another user claimed to possess a tampered device bought from local IT retailer Challenger, stating that Ledger subsequently provided a replacement unit. On October 13, Ledger announced it had requested retailers in seven jurisdictions—including Singapore, Thailand, Vietnam, and Hong Kong—to suspend sales of its devices while investigations continue. The Singapore Police Force confirmed ongoing communication with Ledger as the company reviews affected cases.
The early reporting of tampered hardware in Singapore underscores significant vulnerabilities in the distribution channels for cryptocurrency security devices. While Ledger has taken immediate steps to suspend sales across multiple Asian markets, the fact that local losses occurred weeks before global awareness suggests potential gaps in initial detection or consumer reporting mechanisms. The presence of malicious components in devices sold by authorized retailers raises critical questions about supply chain verification processes and the extent of third-party compromise.
This incident serves as a stark reminder that physical security breaches can bypass digital safeguards, directly impacting institutional and individual asset custody. The involvement of high-profile figures like Mark Karpelès adds weight to the credibility of the claims, potentially accelerating regulatory scrutiny into hardware wallet manufacturing and distribution standards. Market participants should monitor how Ledger addresses the root cause of the implants and whether further jurisdictions report similar anomalies, as trust in hardware-based cold storage is foundational to secure crypto adoption.
