# This Week in Crypto: Ledger Wallet Tampering Exposed

> This Week in Crypto: Ledger Wallet Tampering Exposed

News · 5 min read

Published 16 October 2026

This week in crypto, new findings in the Ledger hardware wallet investigation revealed how attackers used hidden cellular implants to steal recovery phrases, raising fresh concerns about the security of self-custody. Despite continued Bitcoin ETF outflows and stronger US inflation data, Bitcoin remained above US$80,000. Meanwhile, Australian regulators outlined new requirements for crypto platforms, and Ethereum Name Service proposed a major upgrade to its decentralised naming system.

The Ledger investigation took a significant turn this week after the company's security research team, Ledger Donjon, revealed how malicious hardware had been installed inside genuine Ledger devices sold through third-party reseller CryptoBilis. Unlike conventional phishing attacks or software exploits, the attack involved physically modifying wallets before they reached customers, allowing criminals to capture sensitive information during the initial setup process.

According to Ledger, the implants contained a small microcontroller capable of reading the 24-word recovery phrase as it appeared on the device's screen. The stolen information was then transmitted over cellular networks using an embedded SIM card, allowing attackers to obtain the recovery phrase without needing physical access to the wallet again. Importantly, the devices' secure chips were not compromised, and the implants did not interfere with transaction signing. Instead, the attack bypassed those protections by capturing the recovery phrase at the point it was displayed.

The findings prompted Ledger to request that distributors and resellers across six Southeast Asian countries and Hong Kong temporarily suspend sales while investigations continue. The incident has also reignited debate around cryptocurrency custody, particularly the risks associated with purchasing hardware wallets through third-party suppliers. While hardware wallets are designed to keep private keys isolated from online threats, this case demonstrates how vulnerabilities in the physical supply chain can undermine those protections.

Ledger responded on Thursday by unveiling Atom, a new US$849 hardware wallet with additional protections against physical tampering. The smartphone-like device separates everyday Android applications from sensitive wallet operations and incorporates security features that Ledger says could prevent similar implants. The company also claims the device can detect tampering even while powered off, reflecting an increased focus on hardware security.

For customers who have purchased a Ledger device through Digital Surge, we'd like to clarify that these devices were purchased directly from Ledger and shipped directly by Ledger, rather than being sourced through a third-party reseller. Based on information released so far, Ledger has reported no indication that its own systems or direct sales channels were compromised. The investigation remains ongoing, and we'll continue monitoring developments.

Away from security, institutional sentiment remained cautious as US spot [Bitcoin](/buy/btc/) ETFs recorded approximately US$681 million in net outflows last week, their largest weekly withdrawal since June. The reversal suggests some investors are reducing exposure following Bitcoin's recent recovery, particularly as uncertainty around interest rates and the broader economic outlook continues to weigh on financial markets.

Adding to that uncertainty, the latest US inflation figures showed consumer prices rising faster than expected. Headline annual inflation increased to 3.7% in September, up from 3.4%, while core inflation rose to 2.6%. The figures renewed concerns that the Federal Reserve may need to maintain higher interest rates for longer, potentially limiting investment in risk assets such as cryptocurrencies. Despite these pressures, Bitcoin has managed to hold above US$80,000, showing resilience against a combination of institutional selling, inflation concerns and renewed security headlines.

Closer to home, Australia took another significant step towards establishing its new digital asset regulatory framework. The Australian Securities and Investments Commission (ASIC) opened consultation on proposed financial, custody and trading requirements for crypto platforms ahead of the framework's planned introduction in 2027. The proposals follow legislation passed earlier this year and aim to provide greater clarity around how digital asset businesses will be licensed and supervised.

Among the proposed measures are three alternative capital models, restrictions on platforms trading for their own accounts and quarterly reporting requirements for wallets holding customer assets. ASIC is also considering allowing offshore custody arrangements, while seeking feedback on safeguards to protect customers if an overseas parent company or related entity experiences financial difficulties. For crypto businesses, the proposed standards represent an important shift towards clearer operating requirements, while potentially introducing more consistent protections for customers.

ASIC also proposed extending its existing consumer protections for contracts for difference (CFDs) for another decade, while clarifying that the rules apply to products settled using digital assets. The measures address leverage limits, margin requirements, negative balance protection and marketing incentives. Unlike ordinary spot cryptocurrency trading, CFDs are leveraged derivative products that allow investors to speculate on price movements without directly owning the underlying asset. The consultation remains open until 9 November.

Meanwhile, development continued across the decentralised ecosystem, with [Ethereum Name Service (ENS)](/buy/ens/) proposing a major upgrade to its naming infrastructure. ENS allows users to replace complex [Ethereum](/buy/eth/) wallet addresses with readable names ending in .eth, making it easier to send digital assets and interact with blockchain applications.

ENS founder Nick Johnson submitted a proposal to activate ENSv2, a redesigned version of the protocol intended to improve how Ethereum domains are registered, managed and controlled. If approved, new domain registrations would transition to the upgraded system, while existing holders could continue using and renewing their names without being required to migrate. The upgrade would also introduce more flexible permissions and domain management capabilities, alongside plans for ENS Labs to transfer its remaining administrative control to the DAO, further decentralising the infrastructure supporting blockchain-based identity.

This week's developments highlight the different challenges facing crypto as the industry continues to mature. Ledger's investigation has brought hardware security and supply chain risks into sharper focus, while ETF outflows and persistent inflation are testing Bitcoin's recent recovery. At the same time, Australia's regulatory progress and upgrades to Ethereum's infrastructure show that development continues beyond short-term market movements. With security investigations ongoing and economic uncertainty still influencing sentiment, the coming weeks will be important for both market confidence and the industry's longer-term progress.

**Other news:**

- [Chainlink](/buy/link/) integrates with [Stellar](/buy/xlm/)
- [Ripple](/buy/xrp/) partners with Privy for XRPL payments
- HEX founder Richard Heart reportedly detained
- Tron plans US$200M [TRX](/buy/trx/) acquisition fund

About the editorial team

The Digital Surge Editorial Team

Our editorial team writes and reviews Digital Surge’s news, insights and crypto guides, pairing plain-English explanations with the practical experience of running an [Australian cryptocurrency exchange](/about-us/). We keep every article accurate, current and easy to act on.

[Read our editorial guidelines ›](/editorial-guidelines/)

News & Insights

## More from News

[News This Week in Crypto: AI Raises New Questions Over Blockchain Security This week in crypto, advances in artificial intelligence sparked a debate over the long-term security of Bitcoin and Ethereum, with researchers… Read article →](/news/this-week-in-crypto-ai-raises-new-questions-over-blockchain-security/)[News This Week in Crypto: Australia Enters a New Regulatory Era This week in crypto, Australia reached an important regulatory milestone as ASIC’s temporary no-action position for digital asset businesses came to… Read article →](/news/this-week-in-crypto-australia-enters-a-new-regulatory-era/)[News This Week in Crypto: Bitcoin Gives Markets Some Clarity This week in crypto, Bitcoin climbed to a new yearly high as renewed ETF demand, improving regulatory sentiment and a wave of short liquidations… Read article →](/news/this-week-in-crypto-bitcoin-gives-markets-some-clarity/)  [View all News →](/news/)

## Get started on Digital Surge

---

*Source: [This Week in Crypto: Ledger Wallet Tampering Exposed](/news/this-week-in-crypto-ledger-wallet-tampering-exposed/) · Last updated: 2026-10-16*
