Mark Karpelès, the former CEO of the defunct Bitcoin exchange Mt. Gox, said Ledger had received reports of hardware wallets being tampered with since at least December 2025 without issuing public warnings to users.
Security researcher Joe Grand reported a compromised Ledger Nano X on March 4, 2026, after purchasing the device through Lazada, an e-commerce platform in Thailand. Ledger acknowledged Grand's report and said it was investigating the matter internally following his disclosure.
A prior incident on Oct. 9 involved Ledger devices sold by CryptoBilis, an authorized reseller in Southeast Asia. Details of that compromise were not immediately available.
Karpelès, known for his role in the Mt. Gox bankruptcy, has spent years facing cryptocurrency security failures. His concern about Ledger's delayed public communication reflects a broader tension in the hardware wallet industry: the gap between internal incident discovery and external disclosure to customers who rely on these devices to store private keys.
