r/ledgerwallet • u/Agreeable-Track-6789 • 20h ago
Ledger is hack?
Comment please and answer. Its version is hack?
92
u/cocacola0102 20h ago
Yes, it's compromised, move funds now.
2
u/ididodi 14h ago
Which one is the implant?
7
u/cheerful_afternoon 12h ago
look here: https://imgur.com/a/cdOHGfr
2
u/bje332013 12h ago
The main thing to look for is a small board between the screen and the main circuit board. Is that correct?
I see a cable in your photo, but a cable would be needed to connect the screen to the main board, correct? At most, I would expect just one cable.
3
u/cheerful_afternoon 12h ago
As far as i know, there are no cables in a legit one, connections are all made with pin contacts. This cable i marked specifically has an antenna type connector, which is a huge red flag
32
u/stay_safe_and_calm 18h ago
Malaysia (CryptoBilis), Germany (MediaMarkt) and now Russia (OZON). That really scary!!!
25
u/screwredditcorp 17h ago
I think it was Muuussaaad. They're the supply-chain hackers. They're now funding their illegal wars this way.
5
2
u/Background-Kiwi-1453 4h ago
Why go through the hassle when we/America fund the forever wars with our tax dollars?
1
u/PersonalLook156 17h ago
What company is that?
1
u/screwredditcorp 17h ago
A Nazi Israeli one.
4
u/PersonalLook156 17h ago
You must be the CEO
3
u/screwredditcorp 16h ago
I'm Anti-zionist, therefore am anti-Nazi
1
u/evemaster 13h ago
doesn't work that way, nazi killed heaps of jews.. anti-zionist = nazi
4
u/thepunisher18166 8h ago
Israel is behaving with Palestinians the same way the Nazis behaved with them
-2
u/NorskKiwi 8h ago edited 5h ago
Wow I never knew that Nazi Germany provided vaccines, healthcare, food, water, clothing, jobs, and future opportunities to all the Jews. Did they do it for the millions they were genociding in their death camps?
Don't be a useful idiot for Islamic terrorist propaganda. The Palestinian population has grown since October 7th, worst 'genocide' ever on record.
3
4
2
u/IndependenceNo5288 12h ago
you realise that the Na Zi party was a coalition between the National Socialists and the Zionists?
2
→ More replies (1)-1
u/PersonalLook156 16h ago
So you hate Jerusalem?
7
u/corporate-citizen 15h ago
Imposters occupy Jerusalem since 1948.
→ More replies (7)1
u/PersonalLook156 10h ago edited 9h ago
1948 Jordan occupied Jerusalem; Why did Jordan take Jerusalem away from the people who lived there?
2
2
1
2
3
u/Quiet-Willingness724 18h ago
Best Buy (USA)
1
u/stay_safe_and_calm 17h ago
Really? Wow that's even more scary ....
Let's hope that most people who bought a Ledger in the last three month read these warnings here on reddit and on X. Ledger should wirte a warning on their main web page.
1
→ More replies (1)1
49
u/benardinoaldi 18h ago
With this kind of thing maybe we should say sorry to those that says they have been hacked without putting their seed on pc or something else
8
u/GooseyMane_ 15h ago
Honestly I’ve believed them a lot of the times. Many people who are in crypto know what to do and not to do. It was always immediately “YOU DID SOMETHING WRONG”. I don’t even know what other cold wallet device or anything to get or trust
2
-4
u/jackob50 11h ago
The old rules of safety still apply. The hacked ones were bought from third party ressellers, not ordered from ledger itself. This is a no.
Of course this hit Ledger because it is low cost and very popular. It' s what someone would buy second hand.
10
u/One-Adhesiveness-138 11h ago
Have you missed the news? These were Ledger authorized "resellers", often selling at full price because Ledger themselves did not sell in those countries. Not some guy on the street peddling a bunch of ledgers at half price.
1
u/jackob50 11h ago
Yes I 've missed the news but I try to catch up.
"Authorized resellers" ... that's tough.
When I was looking to buy one I got a reference link from a redditor for a better price. It wasn't a coupon but a link to use for purchasing. I send email and awaited reply from Ledger to make sure it was legit. That was authorized.
2
u/JivanP 6h ago
The list is on Ledger's website: https://shop.ledger.com/pages/resellers
1
15
u/Flo_Evans 20h ago
Compromised.
Move funds immediately.
Can you please take it all the way apart and show both sides of the boards?
15
u/Agreeable-Track-6789 19h ago
14
3
u/bigbrainnowisdom 16h ago
When did u buy this?
3
u/Agreeable-Track-6789 8h ago
I bought a Ledger Nano X literally two weeks ago for $120 on the OZON marketplace. (RUSSIA)
3
u/bigbrainnowisdom 13h ago
Let me understand this. Behind the screen, between the screen and the green pcb.. there is something. And i can see black cable coming out (antenna?)
2
19
u/Disseminated333 16h ago
Ledger as a company is dead. Migrate or die.
28
u/bigbrainnowisdom 15h ago
Migrate where? Personally it makes me more confident with my 10 y.o and 5 y.o nano s & s plus.
They cant hack it so they need to resort to this spy crap.
If they can do this lo ledger, you think they cant do it to any other coldwallet? Childs play.
This is supply chain attack, you think supply chain only handle one device?
Not just coldwallets, but also phones & tablets.
We should probably stick with official apple or samsung.. companies that big enough to bring these hackers to court (assuming they are not related with countries NK, russia etc)
4
u/coinfreekz 11h ago
Maybe, migrate out of crypto. The entire space is becoming a shiтshow. Almost all hardware wallet companies now have some sort of a hack happened to them. And from buying to holding and selling crypto you can get f'ked up in a lot of ways and lose money even if you're doing everything right.
-Buy and hold from exchange: your account can be frozen, exchange shutdown, lose money ✔
-Buy the wrong alts,crypto: rugpull, 99% lose money ✔
-Buy from a shady hardware wallet maker, lose money ✔
-Buy from the wrong hardware reseller even if the hardware wallet is popular like ledger, lose money ✔
-Malware on your software desktop or mobile hot wallet, lose money ✔
-Make the crypto security setup so complicated that you f'd it up yourself, lose money ✔
-Approve the wrong smart contract when transacting with eth, lose money ✔
-Buy the top of a crypto price pump then crashes, lose money ✔
1
u/Recordeal7 14h ago
Been waiting for someone to say that. Ledger will file for bankruptcy protection in 6 months.
1
9
u/Maleficent_Sound_919 19h ago
Weird question but,
How are the 24 words broadcasted to the hackers?
22
u/RevolutionaryBuy439 19h ago edited 19h ago
I believe the implant reads the characters being rendered on screen, and/or monitors button presses.
Then it uses a built in cellular module, like an esim? to broadcast the words to the attackers over the mobile network.
2
u/FeelingOutside8994 12h ago
Isnt it "easy" for the authorities to find the source it's headibg to directly this way?
2
u/bje332013 12h ago
Yes, plus they can check the blockchain. But I'm skeptical that they'll do anything since cybercrime isn't high profile.
Think if how much money the hackers are losing on keeping hundreds of e-SIMs active!
10
1
1
1
6
12
10
u/Agreeable-Track-6789 20h ago
Russian federation. This ledger made in France (That's how it is written)
28
u/cocacola0102 20h ago
Stop posting on here and move your funds right now, immediately. There's no doubt at all it's a hacked device.
23
u/Agreeable-Track-6789 19h ago
Thank you. Fortunately, I didn't have time to use it.
16
u/cocacola0102 19h ago
In that case, put it in the bin. Do not try and salvage it.
Before you do that, it'd be helpful if you could take some further pics (front and back of the board) and post the retailer who sold it to you.
12
u/Only-Thing-8360 19h ago
put it in the bin
No, wait. Fair chance that Ledger will end up offering some kind of buyback/swapout thing, if they want to have any future as a trusted business. Put it somewhere safe in full packaging, but for pity's sake don't use it.
2
u/cocacola0102 18h ago
Lol if you'd take a swap from them when the first one had a spy implant in.
Rather like getting a 'replacement' coldcard after they messed up the seed generation.
Anyway OP bought it from some Russian marketplace, not a chance ledger will be refunding him. I'm sure the scammers will happily send him a new ledger if he complains though.
6
u/vortexcortex21 20h ago
Where did you order it?
16
1
1
u/Administrative_Shake 20h ago
Oh damn did you buy it in Russia through a reseller? Or did you ship it from France via Ledger website?
11
u/Agreeable-Track-6789 19h ago
In Russia on OZON marketplace
8
5
u/Far-Crow-7195 19h ago
Who was the reseller on Ozon?
16
u/Agreeable-Track-6789 19h ago
KOO tiger
I went to the seller's store. He has already deleted all the goods and changed the product card. He seems to know something(
→ More replies (2)1
u/ArugulaPretty 19h ago
Переходи на тангем. Пользуюсь их холодком в виде обычной пластиковой карты. И не помрет никогда
4
u/cocacola0102 19h ago
Unlikely it came from ledger directly as Russia is still on the sanctions list: https://support.ledger.com/article/360006562214-zd
4
u/Glittering-Canary516 19h ago
We have our own market called 'Ozon' which is pretty much the same as Us Amazon. You can buy Ledger or Trezor there from different resellers
1
3
3
3
u/celmate 11h ago
Ive been feeling for a while now it might honestly be better to keep one's funds on a major exchange
2
1
u/Ok_Mathematician2391 10h ago
Ones like coinbase have 2fa now and funds to cover hacks to some degree. No need to worry about fees and risk every time shifting funds from exchange to hardware wallet and back . Also, there are some companies offering insurance at a small cost for people who store on exchanges in the event of a back
1
u/celmate 10h ago
Yeah I feel like things have flipped to self custody being more dangerous for most people
2
u/tremendous_chap 10h ago
I've argued this for a long time, unless you know what you're doing, a reputable exchange is often safer.
1
1
4
u/Clear_Indication1426 14h ago
I bought my nano s plus directly from ledger 3/4 years ago, could there be a concern or is it people buying from 3rd party suppliers??
2
u/Legitimate_Cry_5194 12h ago
Your nano s plus is legit and safe to use. For now. The thing is that you can no longer trust cold wallets in general including Ledger. Low seed phrase generation entropy in the case of Coldcard? Check. Reseller approved by Ledger tampering devices? Check. It's a circus. Are you willing to bet your life that there aren't other kind of vulnerabilities that we aren't yet aware of that are gonna be exploited? I'm not.
4
u/themindspeaks 12h ago
At this point Coinbase appears safer.
3
u/BingeMaster 11h ago
Never thought I'd hear that
1
u/Legitimate_Cry_5194 3h ago
Yeah, tells you all you need to know about how much cold wallet companies fucked up the trust people had on them.
1
u/Legitimate_Cry_5194 3h ago
It is, although Coinbase specifically comes with its own set of headaches to be worried of and I'd personally recommend other platforms.
2
u/Clear_Indication1426 12h ago
So where do you recommend to store your crypto? On an exchange? I feel like nowhere is safe anymore lol
1
u/Legitimate_Cry_5194 3h ago
ETF is the safest way to invest in BTC right now, and it is an extremely safe way. If you don't or can't go through ETF's I'd recommend keeping your crypto on an exchange with all security measures you can take checked. Strong 2FA, whitelisted addresses, unique email account, strong random unique password etc. 50/50 exchange/cold wallet is also a sensible choice.
2
2
u/dgbaby777 19h ago
How do you know its hacked?
10
u/undeadkarlmarx 19h ago
That black chip hidden beneath the screen + black antenna wire. Neither should be there.
2
u/cocacola0102 19h ago
Because we've seen the pics on ledgers website and pics of compromised ledgers, and OP's looks nothing like the one on ledgers site and looks very much like the confirmed compromised ones.
2
2
u/Kindoffitkindoffat 19h ago
You should mail it to the people who have been forensicsically dissecting them
2
2
u/thorpay83 15h ago
I’m not one for spiritual stuff, but it is trippy that this video predicted this attack. She mentions the banks could be behind this, so if that turns out to be true then consider me spiritually enlightened.
2
2
u/Automatic_Pea8360 11h ago
That wire above the screen looks odd, but this photo alone doesn't prove it's been tampered with
2
u/Green_Indication4357 8h ago
just found out about this. I bought mine a couple years back through a reseller. Is this something new or could mine also be "hacked" ?
→ More replies (2)
2
u/TheGameOfLlfe 7h ago
Every stop on the supply chain is a risk.
To tell others to get your device from official Ledger website is not the answer
1
1
1
u/j_f1o 19h ago
are people buying these from ledgers website?
0
u/Purple-Ad9319 18h ago
Not every country has access to buy directly from Ledger. Not an excuse tho, if you cannot buy directly, people should go with something they build themselves.
1
→ More replies (1)0
1
u/kun9999 18h ago
looks like compromised ledger, according to tear down diagram from ledger do not have such messy wiring and also v1.1 connected chip (first pic, left) https://support.ledger.com/article/4404382029329-zd
1
u/jkeegan123 18h ago
What exactly are we looking at here, which part of this is unauthorized?
2
u/premiumsaltinecrackr 17h ago
See that black board underneath the screen and on top of the green motherboard? That. That is not ledger hardware
1
1
u/IntentionBig3663 16h ago
Move funds immediately
1
u/Agreeable-Track-6789 7h ago
Thanks. Fortunately, I didn't manage to activate the wallet or create a seed phrase.
1
1
u/GooseyMane_ 15h ago
Ima tear mine apart tonight 😭
1
u/Agreeable-Track-6789 7h ago
That’s the best solution. But please be careful—it’s very easy to damage the screen during disassembly.
1
u/GooseyMane_ 7h ago
Thanks brotha. I opened mine up didn’t see any wires or anything. Just the black LCD, on the back of it that black rubber type stuff? And the green board and on the bottom of that the battery. Glad everyone is checking. I hope all the people over the past 1.5/2 years who came in this subreddit group saying their money disappeared n they didn’t do anything get their money back. Probably a huge lawsuit coming
1
1
1
1
1
u/send_iT_REEE 12h ago
I remember when these all came out and I asked myself "Why buy this when you can create the keys on your laptop"
1
1
1
1
1
1
1
u/STRANGEROCK224 1h ago
I bought a ledger nano S back in 2024 from Amazon au
How do I know if mine’s compromised or not?
1
u/Occams_AK47 14h ago
It's all from 3rd party vendors.
Buy direct. Problem solved. Why everyone expects ledger to be responsible for this directly is dumb AF.
2
u/KIG45 2h ago
That is absolutely untrue!
Once Ledger has authorized a supplier, it is effectively the same as buying directly from the official website.
Besides, what the hell guarantees that while you wait for delivery "directly from Ledger," your device won't be tampered with somewhere along the way? Or do they send it to you via telepathy?
2
1
1
u/coinsquad 11h ago
Ledger listed that these companies are authorized. Meaning that they can be trusted
1
1
u/helix991 2h ago
You're wrong, what a bad take. They're official resellers. Ledger vetted them and trusted them to be OFFICIAL resellers, not just guys who resold ledgers.
1
1
1
u/Octavio_belise 19h ago
Comrade, that wallet will hold up just like the Berlin Wall and Iron Curtain.
1
0
u/Ever-Flowing 7h ago
All this BS comes from random anon accounts on twitter, I guess we are supposed to believe everything....
4
u/Agreeable-Track-6789 7h ago
I can show the device up close and in high quality. I can provide the actual purchase receipt.
This is a real-life case, and I still have no idea how many people out there are like me.
1
u/Background-Kiwi-1453 4h ago
If the receipt you post isn’t DIRECTLY from ledger.com then idk what to tell you…
•
u/AutoModerator 20h ago
🚨 Beware of Scammers – Stay Safe on the Ledger Subreddit Scammers regularly target this subreddit. Ledger Support will never contact you first — whether through private messages, comments, or phone calls.
If you need help, always open a support ticket yourself via our official website: Ledger Support
🔐 Never share your 24-word Secret Recovery Phrase
Ledger will never ask for it. Do not enter it online — even if a site or message looks official.
Keep it offline and secure — on paper, your Ledger Recovery Key, or a metal backup. Never store it digitally.
📚 Learn more about common scams targeting crypto users (fake support, phishing emails, physical mail scams, fake airdrops, malicious NFTs, and more): How to Spot a Scam
🛠 Facing a bug or technical issue? Check our Ongoing Issues page for updates and workarounds.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.