Tampered hardware wallets: the supply chain threat model that attestation does not cover
Ledger confirmed an unauthorised hardware implant in a device sold through the reseller CryptoBilis, an implant that read the recovery phrase off the screen and sent it out over LTE while the secure element kept working correctly. This reference sets out the verified timeline, the competing loss estimates and who produced each one, what genuine device checks can and cannot prove, and how strong the evidence behind every claim actually is.
.png){kind=logo}
