Ledger Recalls Devices Amid Supply Chain Attack: Spyware Implants Detected in Europe and Asia Ledger is withdrawing its hardware wallets from global resellers following the discovery of spyware implants in devices sold in Germany and Singapore. The implants capture recovery phrases without altering device functionality, prompting a broader review of the distribution chain and enhanced security checks by both Ledger and competitors. Hardware wallet maker Ledger is recalling its devices from resellers worldwide, including MediaMarktSaturn in Europe and Metapod in Singapore, after reports of a supply chain attack involving spyware implants. Former Mt. Gox CEO Mark Karpelès, now at Tibane Labs, has been tracking the incidents, including a confirmed implant in a Ledger Flex bought in Singapore. The implants appear to steal recovery phrases via LTE, though they do not modify the secure element or transactions. Ledger and other makers are tightening distribution controls as investigations continue.