Mark Karpelès criticizes Ledger over response to early wallet implant warnings
Former Mt. Gox CEO Mark Karpelès has criticized hardware wallet manufacturer Ledger, claiming the company failed to alert customers promptly despite receiving reports of tampered devices months earlier.
Former Mt. Gox CEO Mark Karpelès has criticized Ledger's handling of hardware wallet tampering risks, arguing that the company should have taken stronger action to notify the public. According to Karpelès, Ledger received reports of devices modified with malicious components as early as December 2025, but did not issue an immediate public warning to customers.[1][2][4][5]
Karpelès claimed Ledger was aware of advanced spy implants by March, describing the situation as "a five-alarm fire in the making." Security researcher Joe Grand reported a compromised Ledger Nano X bought via Lazada in Thailand on March 4, 2026. Ledger acknowledged Grand's submission at the time and stated that it was investigating the matter internally.[2][3]
Ledger subsequently disclosed a security incident on October 9 involving hardware units sold by CryptoBilis, an authorized reseller in Southeast Asia. Pointing to an increase in similar reports and the growing sophistication of device tampering, Karpelès urged Ledger to take a more proactive approach in alerting users to hardware threats.[2]
Key facts
- Mark Karpelès said Ledger received reports of hardware wallets tampered with malicious components as early as December 2025 without issuing a subsequent public warning.
- Karpelès criticized Ledger's response to the implant warnings, describing the risk as "a five-alarm fire in the making."
- Security researcher Joe Grand reported a compromised Ledger Nano X purchased on Lazada in Thailand to Ledger on March 4, 2026.
- Ledger acknowledged Grand's March 4 report and stated that an internal investigation was underway.
- Ledger disclosed a security incident on October 9 involving devices sold by authorized Southeast Asian reseller CryptoBilis.
Sources · 4 sources
- CT
Coin TelegraphArticle ·
Ledger’s early implant warnings deserved more action, Karpelès says Ledger was contacted about tampered hardware wallets risks months before its latest security crisis, with former Mt. Gox CEO Mark Karpelès questioning its response.
Open source - WB
Wu Blockchain@WuBlockchainPost on X ·
Former Mt. Gox CEO: Ledger Received Hardware Wallet Tampering Reports Since December 2025 but Issued No Public Warning Former Mt. Gox CEO Mark Karpelès said Ledger had received reports of hardware wallets tampered with and fitted with malicious components since at least December 2025, but he had seen no subsequent public warning. Security researcher Joe Grand said he reported a compromised Nano X purchased through Lazada in Thailand on March 4, 2026, which Ledger acknowledged and said it was investigating internally. A security incident disclosed on October 9 involved devices sold by authorized Southeast Asian reseller CryptoBilis. Karpelès urged Ledger to warn users more proactively as similar reports increase and attacks grow more sophisticated.
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 BIG: Mt. Gox's Mark Karpelès says Ledger knew about advanced spy implants back in March and slams its response to what he calls "a five-alarm fire in the making." https://t.co/XdY0RkhdEs
Open source - CN
crypto.news@cryptodotnewsPost on X ·
JUST IN: Former Mt. Gox CEO says Ledger was warned about tampered wallets months ago Mark Karpelès claims Ledger received warnings in December 2025 but failed to adequately alert customers before the latest hardware wallet security incident. https://t.co/ymwYiEhV2n
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 LATEST: Former Mt. Gox CEO Mark Karpelès says Ledger received warnings about tampered hardware wallets as early as December 2025 and should have done more to alert customers before its latest security crisis. https://t.co/jOXQpuH5q0
Open source