Tampered Ledger Wallets Cost Singapore Crypto Users $2.7 Million, Police Confirm
Cryptocurrency investors in Singapore have lost approximately S$3.5 million ($2.7 million) after purchasing tampered Ledger hardware wallets. Singapore police confirmed at least two cases in an October 28 advisory, revealing that complaints began arriving on September 10.
The incidents emerged nearly a month before the wider security breach became public in October. Preliminary investigations found malicious components inside Ledger devices purchased from certain Singapore retail stores.
Malicious Hardware Exposes Crypto Wallet Security
Investigators discovered that compromised devices contained unauthorized hardware capable of capturing recovery phrases and private keys. Attackers could use this information to access cryptocurrency holdings and transfer funds without the owners’ permission.
Hardware wallets normally protect digital assets by keeping private keys offline. However, the Singapore incidents demonstrate how physical tampering can undermine that protection before customers even begin using their devices.
A recovery phrase typically allows users to restore access to their cryptocurrency holdings. Consequently, anyone who obtains that phrase can potentially control the associated wallet and move its assets.
Ledger Suspends Regional Sales Amid Investigation
Ledger began investigating reports involving devices distributed through Southeast Asian reseller CryptoBilis earlier in October. The company confirmed an unauthorized hardware implant in at least one affected device on October 10.
By October 13, Ledger had requested a temporary suspension of sales through regional resellers and distributors. The precautionary measure covered several Southeast Asian markets, including Singapore, Malaysia, Indonesia, Thailand, the Philippines, Vietnam, and Hong Kong.
The company has been reviewing affected cases while cooperating with Singapore authorities. However, the full scale of the suspected supply chain compromise remains uncertain.
Police Urge Users to Protect Remaining Assets
Singapore police advised cryptocurrency holders to stop using devices suspected of tampering. Users should avoid entering recovery phrases or conducting additional transactions through potentially compromised hardware.
Authorities also recommended moving remaining cryptocurrency to a trusted wallet with a newly generated recovery phrase when credentials may have been exposed. Such transfers should take place through an uncompromised device.
The investigation highlights growing concerns about cryptocurrency hardware wallet distribution channels. Even devices designed for offline security can expose investors to significant losses when attackers compromise physical products before delivery.
For cryptocurrency investors, the incident reinforces the importance of verifying device authenticity and following manufacturer security advisories. Singapore police continue investigating the reported losses as Ledger reviews the affected wallets.
