Singapore police find spying hardware inside Ledger wallets from local shops

Singapore police on Oct. 28, 2026, reported finding malicious hardware components in some retail-bought Ledger cryptocurrency wallets, with at least two cases since Sept. 10 involving about S$3.5 million (US$2.7 million) in losses. In an advisory, the Singapore Police Force said some components could capture recovery phrases or private keys, allowing unauthorized people to move assets without owners’ knowledge; no stores were named, and police were in contact with Ledger, which was investigating. Ledger said on Oct. 10 that an unauthorized implant in one customer’s Nano X read the 24-word recovery phrase during setup and sent it via LTE, without affecting the Secure Element, operating system or signing process, so its Genuine Check did not flag it.