Tampered Ledger wallets cost Singapore users $2.7M: Police
- Published
- Updated
- Since then
- 7 new reports
Singapore police said tampered Ledger hardware wallets sold through local stores were tied to at least two reported cases starting Sept. 10, with losses estimated at about S$3.5 million. New coverage also notes that Ledger issued a public alert on Oct. 9, while police warned the suspected hardware could capture recovery phrases and private keys.
Key claims & sources
What it means
Ledger's hardware wallets are marketed as the gold standard for cold storage, keeping private keys offline and away from browser-based exploits. That security model assumes the device itself is untouched between factory and owner. Singapore's case follows a known attack vector: wallets bought through local retailers rather than Ledger's own store, where a device can be opened, seeded with a pre-known recovery phrase, and resealed before it ever reaches a customer.
Owners who bought from unauthorized Singapore retailers now face a hard choice: treat any device not bought direct from Ledger as compromised and move funds to a freshly generated wallet with a seed phrase created in their own presence. Retailers who stocked tampered units face scrutiny and possible liability as police widen the inquiry. The jump from S$2.7 million to S$3.5 million in losses shows the investigation is still finding victims, not closing the book.
Hardware wallets exist to remove trust from software and exchanges, but this case moves the point of failure to the supply chain instead. A device can be cryptographically sound and still be a trap if someone intercepts it before sale. That undercuts the clean pitch of self-custody: security here depends not just on code but on where you bought the box, a retail-trust problem crypto was supposed to design away. (per thedefiant.io)
Singapore police have not said how many retailers or devices are implicated beyond the two cases first logged on Sept. 10, so the S$3.5 million figure may move again as more victims come forward. Ledger's Oct. 9 alert told buyers to verify devices through its own channels, but whether it offers compensation or recalls specific retail batches remains the open question that will determine how far the damage, and the liability, actually extends.
Market reaction i
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 2 months ago | Nostra · Oracle manipulation incident | $3.5M |
| 6 months ago | Sweat Foundation · Withdrawal Logic Flaw incident | $3.5M |
| 7 months ago | Volo Vaults · Private key leakage incident | $3.5M |
| 2.4 years ago | Sportsbet incident | $3.5M |
| 4.2 years ago | Dragoma · Admin Drain incident | $3.5M |
4280 incidents stored · 590 were as large as this one or larger ($3.5M)