The Singapore Police Force (SPF) has issued a critical security advisory following reports of maliciously modified Ledger hardware wallets sold through local retail outlets. Since September 10, 2026, authorities have documented at least two instances where investors fell victim to these compromised devices, resulting in a collective financial loss of approximately S$4.5 million (US$3.3 million). Preliminary findings suggest that the hardware was altered during the retail supply chain process to facilitate the unauthorized extraction of sensitive credentials.
Hardware Tampering and Theft Mechanisms
According to the official police statement, the affected Ledger devices contained unauthorized hardware components designed to intercept a user’s seed phrase or private keys. These components allow attackers to monitor the generation of recovery phrases and gain full control over the digital assets stored on the blockchain. Once the private keys are compromised, the threat actors can transfer funds to external addresses without the owner's authorization or knowledge.
Hardware wallets are generally considered the safest way to store assets like Bitcoin (BTC) and Ethereum (ETH), but physical supply chain attacks remain a sophisticated vulnerability.
The Singapore Police have outlined several key details regarding the ongoing investigation:
- Investigations began following reports filed in September 2026.
- The total confirmed losses currently stand at S$4.5 million.
- Affected units were purchased from third-party retail stores rather than the official Ledger website.
- Ledger is currently collaborating with local authorities to review the technical specifics of the breach.
Industry Response and Security Recommendations
The news has drawn significant attention from the global crypto community. Changpeng Zhao (CZ), the former CEO of Binance, reposted the alert on the X platform, urging Singapore-based users to exercise extreme caution when purchasing hardware security modules. Experts emphasize that users should always verify the integrity of their device's packaging and software via the Ledger Live "genuine check" feature, although hardware-level modifications can sometimes bypass standard software-based detection.
Preliminary investigations show that some Ledger hardware wallets purchased from retail stores in Singapore contain malicious hardware components that can steal users' seed phrases.
Steps for Affected Users
The SPF and cybersecurity experts advise anyone who purchased a device from a retail store in Singapore to immediately cease using the wallet. If a device is suspected of being tampered with, users are encouraged to generate a new recovery phrase on a known secure device and migrate their remaining assets to a fresh set of addresses. The investigation remains active as authorities work to identify the specific retail points of compromise and the individuals responsible for the hardware modifications.
As the digital asset market continues to expand, this incident serves as a reminder of the importance of supply chain security. Investors are generally advised to purchase hardware wallets directly from official manufacturers to minimize the risk of third-party interference.
Frequently Asked Questions
Quick answers to the most common questions about this topic.
For educational purposes only. Nothing here constitutes financial or investment advice. Crypto markets are highly volatile — always DYOR before making any decisions.
Fact-checked per our editorial policy. We maintain strict independence from advertisers. Spot an error? Let us know.