Galaxus removes Ledger wallets from its range as a precaution
Media outlets around the world are reporting on a tampering attack involving Ledger hardware wallets. It’s still unclear how widespread the problem is. Until more information becomes available, we’re pausing sales of Ledger devices with immediate effect.
Attackers tampered with Ledger wallets before they could make it to customers. At least one of the devices examined contained a hidden component. This component read the 24 recovery phrases established during setup and sent them to attackers over the mobile network. Knowing users’ recovery phrases means being able to access cryptocurrencies without owning the device.
Neither Ledger’s firmware nor its security chips failed.
Rather, it was the supply chain that was attacked. So far, Ledger has only confirmed cases involving a reseller in Southeast Asia. The manufacturer isn’t aware of any confirmed cases in Europe. However, it’s currently investigating a suspected case in Germany.
How Galaxus is responding
According to Ledger, it’s still unclear how widespread the tampering issue is. In theory, it’s possible the problem extends beyond Asia.
With this in mind, we’ve pulled all Ledger products from our range as a precaution. So far, we haven’t received any reports that devices in stock with us are affected. Nor have any customers reached out with suspicions about devices they’ve bought from us.
Do you have any questions about a device you purchased from us? Feel free to contact our Customer Service team.
News about features in our shop, information from marketing and logistics, and much more.
Show all
