Incident Ledger: what happened, and why NFC card-format wallets are a game changer
Ledger has confirmed an unauthorized hardware implant in at least one device sold by the retailer CryptoBilis. The investigation is ongoing, and the attack described targets the supply chain, not the chip or firmware. NFC card-format wallets like Tangem, CoolWallet Go, or ELLIPAL X Card reduce certain attack surfaces, but buying from a trusted source and verifying your device remains essential.
On October 9, 2026, Ledger, one of the world's best-known hardware wallet manufacturers, announced it was investigating cryptocurrency thefts affecting customers in Southeast Asia who had purchased their device from an authorized retailer, CryptoBilis. A few days later, Ledger confirmed that at least one of the affected devices contained an "unauthorized hardware implant," which the press described as a spy chip hidden inside a sealed device. On-chain analysts suggest between $86 and $93 million were stolen. As of October 12, 2026, the investigation is still ongoing. Here are the established facts, what this episode teaches us about the hardware wallet supply chain, and why the NFC card format addresses some of the risks raised.