Hardware wallet security expert Joe Grand stated that average cryptocurrency holders face significant challenges in identifying tampered hardware wallets. Grand has helped recover digital assets from locked wallets and is well known for developing methods to bypass protection mechanisms in devices made by companies such as Trezor and KeepKey.
Supply chain tampering sparks industry concern
Concerns about hardware wallet integrity escalated when reports surfaced of crypto losses linked to Ledger wallets sold through CryptoBilis, an authorized reseller in Indonesia, Malaysia, and the Philippines. Ledger, a leading French hardware wallet manufacturer, confirmed that at least one affected device contained an unauthorized hardware implant.
According to Ledger, the implanted devices sent users’ recovery phrases over cellular networks, compromising the security model that hardware wallets rely on to protect private keys. Ledger’s devices are designed to keep private keys offline, aiming to limit exposure to online threats typically associated with software wallets.
High global demand for hardware wallets has expanded distribution channels, increasing the possibility of supply-chain attacks. Experts note that, as these devices change hands multiple times before reaching end-users, each link in the chain can become a vulnerability.
“It’s really hard to explain to people how they’re supposed to look at their devices, because even technical people like me are not looking at every single device to see if it’s been tampered with,” Joe Grand explained.
Mati Greenspan, a crypto analyst active in the industry since 2013, echoed these concerns, remarking that using hardware wallets introduces additional elements of trust, from manufacturers to suppliers, and he personally opts not to use them to avoid these extra variables.
Responses from industry competitors
Trezor, a major hardware wallet provider and competitor to Ledger, stated that its wallets include authenticity checks and accept only signed firmware but acknowledged that physical tampering remains difficult to fully prevent.
A Trezor spokesperson noted, “You can also check that the packaging and holographic seal are intact and look for unusual marks on the device, but these checks alone cannot guarantee that it has not been modified.”
Trezor explained that the type of implant found in Ledger devices presents an additional challenge because it can extract data from the screen without altering the software. Trezor said it has not detected this attack vector on its own products, but as a precaution, has decided to limit the number of authorized resellers for its devices.
Nick Neuman, CEO of the Bitcoin security company Casa, highlighted that relying entirely on hardware wallet manufacturers or resellers is unrealistic as “there is always an intermediary you will need to trust.” He recommends distributing cryptographic assets across several trusted providers.
Mini dictionary: Casa is a Bitcoin security company based in the US that offers hardware and software solutions to help users protect digital assets through multisignature wallets and security practices.
Design improvements and steps toward better security
Joe Grand proposed several hardware design modifications to reduce the likelihood of successful supply-chain attacks. These include transparent casings that allow users to inspect internal components, and tamper-resistant enclosures that would require attackers to replicate the casing in order to conceal any modifications.
Grand referenced anti-tamper recommendations by electronics engineer Dave Jones, emphasizing that, while these design choices can deter attackers, they are not absolute safeguards against tampering. The researcher advocated for layered defenses and vigilance among all participants in the hardware wallet ecosystem.
| Wallet Provider | Security Approach | Recent Actions |
|---|---|---|
| Ledger | Offline key storage, firmware security | Confirmed implant incident, urged caution |
| Trezor | Authenticity checks, signed firmware | Reducing resellers, no detected implant attacks |
| Casa | Multisig wallets, diversified storage | Advised splitting assets across providers |
