TLDR
- Singapore police say at least two cases of tampered Ledger wallets have been reported since Sept. 10.
- Combined losses total about S$3.5 million ($2.7 million).
- Police say the malicious parts could capture recovery phrases or private keys.
- Ledger asked sellers in seven Asian markets to pause sales on Oct. 13.
- Trezor said it will cut the number of resellers allowed to sell its devices.
Singapore police say some Ledger hardware wallets sold in local shops had malicious parts inside them. The Singapore Police Force issued the advisory on Oct. 28.
Singapore Police Say Ledger crypto Wallets Sold at Local Retailers Contained Malicious Hardware Implants
Singapore police said on October 28 that some Ledger cryptocurrency hardware wallets purchased from local retailers contained malicious hardware implants capable of stealing… pic.twitter.com/RckYdTzFMq
— Wu Blockchain (@WuBlockchain) October 29, 2026
Police counted at least two cases reported since Sept. 10. Total losses came to about S$3.5 million, or $2.7 million.
The advisory gave the figure without a currency code. Unchained treated it as Singapore dollars because it came from Singapore police. It used the European Central Bank’s Oct. 28 reference rates to convert it.
The Sept. 10 start date is 29 days before Ledger shared its own alert. That puts the first local report almost a month before the wider incident became public.
What Police Said About the Devices
Police said the components “could capture users’ recovery phrases or private keys.” That would let outsiders reach the wallets and move funds without the owners knowing.
The advisory did not name the stores or the wallet models. It also did not say when the devices were bought or identify any suspects.
Police said the investigation is continuing. “The SPF is in contact with Ledger, which is reviewing the affected cases,” the advisory said.
It is not clear whether the Sept. 10 case was reported to police at the time or filed later. The advisory also does not say if the Singapore cases are linked to earlier wallet drains.
Police urged anyone with a suspect device to stop entering its recovery phrase or sending transactions from it. They said owners should contact the wallet maker through official support channels.
People who think their phrase or keys were compromised should consider moving remaining funds to a new wallet. That wallet should use a fresh recovery phrase on a clean device.
Police also warned people never to share seed phrases. That includes sharing them with anyone claiming to speak for a wallet company, an exchange or law enforcement.
Ledger’s Earlier Statements
Ledger issued a public alert on Oct. 9 about tampered devices found in the supply chain of CryptoBilis, a Southeast Asian reseller. Almost $100 million was drained from wallets containing spyware parts.
On Oct. 13, Ledger said its researchers found an added part in a device bought from CryptoBilis. The part decoded the recovery phrase during setup and sent it over LTE.
That same day, Ledger asked retailers in Singapore and six other markets to suspend sales. The others were Indonesia, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
In an Oct. 15 blog post, Ledger called the episode “a localized distribution attack.” It did not describe it as a systemic supply chain problem.
Rival Trezor said on Oct. 13 that it would cut the number of resellers allowed to sell its devices. It cited recent supply-chain incidents.
Zero Knowledge Group founder Austin Campbell has pointed to the drains to argue that self-custody users should favor simpler setups.
Police asked anyone with information to call the Police Hotline at 1800-255-0000. Police said the investigation is still in its early stages.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.







