Can crypto users trust the supply chain behind hardware wallets?
Summary
Security researcher Joe Grand said ordinary users cannot reliably detect sophisticated hardware-wallet tampering. The warning follows reports of crypto losses from Ledger devices sold by CryptoBilis: Ledger confirmed one device contained an implant that captured recovery phrases and sent them over cellular networks. Experts noted that hardware wallets add supply-chain trust risks, while packaging checks and signed firmware cannot catch every physical modification. Trezor said it had not seen this attack on its devices and announced plans to reduce its reseller network. Grand suggested transparent casings and tamper-resistant designs could make implants harder to conceal, though no design can eliminate the risk.
