Hardware Wallet Supply Chain Attacks in 2026

On October 9, 2026, Ledger opened an investigation into a wave of drained wallets.  Every confirmed case traced back to devices sold by CryptoBilis, a Malaysia-based reseller operating across Southeast Asia. 

A day later, Ledger confirmed that at least one of those devices carried an unauthorized hardware implant. The implant quietly read the 24-word recovery phrase off the screen during setup and sent it to attackers over a mobile network.
 

Onchain researchers estimate losses between $86 million and $93 million across more than 300 wallets. Either way, it's one of the largest hardware wallet thefts on record, and no software was hacked to pull it off.
 

This is a textbook supply chain attack in which an attacker tampers with the device between the factory and your doorstep. By the time you unbox it, the trap is already set. In this guide, we'll break down how supply chain attacks work.
 

How supply chain attacks happen against hardware wallets

A supply chain attack on a hardware wallet is any tampering that happens after the device leaves the manufacturer and before the owner gets their hands on it. The goal is almost always the same: get access to the private keys or recovery phrase, then wait for the victim to deposit funds.
 

Every wallet passes through several hands on its way to you:

1. Factory. The device is assembled, the secure chip is provisioned, and the firmware is installed.
    
2. Distributor. Bulk stock is shipped to regional warehouses and wholesalers.
    
3. Reseller. Online shops, marketplaces, electronics chains, and airport stores sell to the public.
    
4. End user. You unbox the device, set it up, and start storing crypto.

Each handoff is often a chance for someone to tamper with the device.

The main types of supply chain attacks

The main categories and subtypes of supply chain attacks include:

• Firmware implants. The attacker replaces the device's software with a modified version. A classic trick is to force the wallet to generate a recovery phrase that the attacker already knows.
   
• Hardware implants. Extra circuitry is hidden inside the case. It can log button presses, read what's on the screen, or inject malware through a USB port.
   
• Counterfeit devices. A fake wallet built to look like the real thing, often with cheaper chips and pre-seeded keys, is swapped for the original in the box.
   
• Returned-product restocking. A buyer tampers with a device, returns it, and the seller puts it back on the shelf for the next unlucky customer.
   
• Software supply chain attacks. Rather than touching the device, the attacker poisons a library or an app that communicates with it.

What ties these together is trust. You trust that the box is sealed, that the seller is honest, and that the device in your hand is the one the manufacturer built. A supply chain attack exploits exactly that trust.

Recent supply chain attacks

Supply chain attacks on crypto wallets aren't theoretical. Here are the cases that shaped how the industry thinks about them.

Ledger and CryptoBilis (2026)

The CryptoBilis incident is the biggest physical supply chain attack the hardware wallet industry has seen. Tether has frozen around $10 million in USDT linked to the theft.

Fake wallets (reported 2023). Kaspersky analyzed a counterfeit Trezor Model T bought through a classifieds site. The chip had been swapped and the firmware modified so the device picked from just 20 pre-set recovery phrases. The attackers knew the keys from day one and waited about a month before emptying the wallet.

Fake "replacement" Ledgers (2021). Scammers mailed tampered Nano X devices to real customers, each accompanied by a letter and a hidden flash drive. Victims were tricked into typing their recovery phrase into a fake app.

Across these cases, the same themes keep showing up:

• The target is the recovery phrase, usually at the moment it's created or entered.
• Cheap or unofficial channels are the entry point. Discounted stock, marketplaces, and third-party sellers recur.
• Victims don't notice until the money is gone, sometimes weeks or months after setup.
   

Why traditional defenses fail against supply chain attacks

Most hardware wallet buyers rely on three layers of protection: a secure chip, an authenticity check, and buying from a legit seller.

Genuine checks only see the chip

Some hardware wallets run an authenticity check when you connect them. The secure chip proves it's genuine by signing a challenge with a key only the manufacturer could have programmed into it. This is a solid defense against fake chips and fake firmware.
 

The problem is that it only vouches for the chip. Ledger itself has said its Genuine Check can't detect an added implant when the original Secure Element is intact. A security expert confirmed that his tampered device passed the check and said the only reliable way to find the extra board was to open it. Most people will never do that, and opening a device can damage it.

More components mean more places to hide

A modern hardware wallet with a screen, buttons, a battery, Bluetooth, and USB has a lot going on inside. Each of those parts sits outside the secure chip, and each one is a potential hiding spot or data source for an implant.

Authorized resale is not enough security 

Buying from an authorized reseller does not guarantee safety. Every extra pair of hands between the factory and you is one more point of trust you can't verify.

How to protect yourself against supply chain attacks

You can't inspect every factory or warehouse your wallet passes through. But you can make choices that significantly reduce the risk.

Verify authenticity and inspect the device

Always run the manufacturer's authenticity check in the official app, downloaded only from the App Store or Google Play. Check the packaging against official product photos. A brand-new wallet should always create a fresh wallet on first use. Reject any device that shows an existing wallet, with a pre-printed recovery phrase, PIN, or access code.

Choose a tamper-proof wallet

The CryptoBilis implant needed three things: a screen to display the seed phrase, a battery to power it, and space inside the case to hide a radio. Take those away, and this style of attack has nothing to work with.

How Tangem Wallet defends against supply chain attacks

A supply chain attack targets the gap between the factory and the buyer. An attacker intercepts, modifies, or replaces a hardware wallet before the owner receives it.

Tangem uses seven mechanisms to prevent this. Each one removes a specific attack surface from the chain.

1. Immutable firmware. The secure element uses write-once storage. No entity can flash new firmware after manufacture. This eliminates malicious updates and vectors for firmware interception.
    
2. Cryptographic card identity. Each chip generates a unique key pair at the time of manufacture. Tangem registers the public key on its attestation server. A substituted or cloned card cannot prove ownership.
    
3. Three-layer attestation. The Tangem app verifies the card identity, wallet integrity, and firmware hash before every operation. A counterfeit card fails verification at first tap.
    
4. Tamper-resistant hardware. The Samsung S3D350A has active shielding, voltage glitch detection, and light sensors. Physical intrusion triggers key destruction.
    
5. On-chip key generation. Private keys are generated and stay inside the secure element. No key material moves through a network or software layer that an attacker could intercept.
    
6. No seed phrase. By default, no recovery phrase is generated, displayed, or stored. This removes the most common interception target in hardware wallet supply chains: pre-filled or photographed seeds.
    
7. Simple design: No screen means nothing to read. The CryptoBilis implant worked by watching the display. Tangem cards don't have one. No battery means no power for a hidden module. The card only wakes up when it sits in your phone's NFC field, for a few seconds at a time. 

How the industry is responding to supply chain attacks

Ledger says it's reviewing its reseller controls and anti-tamper protections. It has told authorized resellers to source stock only through official channels and to stop restocking returned products.

Trezor removed CryptoBilis from its authorized list and is shrinking its reseller network, with the changes taking effect on January 1, 2027. OneKey revoked CryptoBilis's authorization and is offering free replacements for devices bought there between March 1 and October 13, 2026.
 

You can purchase a Tangem Wallet anywhere and from anyone, even from the infamous shady guy in your city’s darkest alleys. Just make sure to reset the wallet if the app tells you it has been preactivated.

Ready to secure your crypto with a wallet that has less to tamper with? Get Tangem.

References

• BleepingComputer: Ledger confirms spy chip implant behind wallet crypto thefts
• CoinDesk: Ledger finds covert cellular implant
• Decrypt: Ledger finds LTE implant in suspected $86M drain
• Cryptowisser: MediaMarkt halts sales
• BleepingComputer: Altered Ledger devices mailed to customers
• Tangem: How to Check Wallet Authenticity
• Tangem: Tamper detection for hardware wallets