Ledger wallet's European supply chain suspected of contamination: two devices have been found to be implanted with spyware

Cryptocurrency community user Johannes posted that he found suspected spyware and hardware modifications, including additional cables and LTE modules, in two Ledger hardware wallets purchased at different stores of the European retailer MediaMarkt, and called for Ledger to immediately recall the related products.

Johannes stated that MediaMarkt employees confirmed that the second device was not a returned item, as returned Ledger products would be sent directly back to the manufacturer rather than resold as new. Store records show that the relevant inventory came from the supplier Aqipa GmbH. Since the company operates distribution in Europe, Johannes suspects that the issue may involve a broader retail inventory, but there is currently no evidence to confirm that Ledger's supply chain has been widely compromised in Europe.

Johannes mentioned that he has handed over the first device for analysis and plans to send the second device to Ledger for investigation, while also releasing an unboxing video as evidence. He reminded users that if they purchase devices from merchants outside of Ledger's official channels, they should check for any abnormalities in the devices. Currently, the above claims mainly come from this user's personal disclosure, and the reasons for the device damage, the scope of impact, and whether it involves a supply chain attack still need to be verified by Ledger and other relevant parties.