Ledger asks resellers in seven Asian markets to pull its wallets while it traces the tampering

In an October 14 incident update, Ledger asked resellers and distributors across seven Asian markets to suspend sales and remove its devices from shelves while it examines where the hardware was altered.

The request covers Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.

The move extends an earlier sales suspension involving CryptoBilis, the reseller linked to the first confirmed cases.

Ledger Donjon, Ledger's security team, is examining recovered devices as part of the investigation.

The regional suspension does not, by itself, establish that devices sold in all seven markets were compromised; it is a broader sales precaution while the investigation remains open.

Asked about a Trezor Safe 7 purchased directly from Trezor, Karpelès said he had found no implant and had received no reports of similar tampering involving Trezor devices at that point.

Trezor separately announced changes to its reseller network following the Ledger incident and said it had no evidence its own devices had been compromised.

Karpelès's comments are limited to the devices and reports he described; they are not a comprehensive security audit of Trezor products and do not establish that all devices from other manufacturers are unaffected.

Ledger's investigation into CryptoBilis followed initial reports of more than $86 million in crypto losses, and the company subsequently confirmed an unauthorized hardware implant in a device linked to the CryptoBilis incident.

Mark Karpelès, former Mt. Gox CEO, reported a suspected implant in a Ledger Flex purchased at Singapore Airport; he said it was bought from Metapod, not CryptoBilis.

The Flex belonged to Ben Yorke of WOO, who reportedly noticed suspicious marks and sent it to Karpelès for inspection instead of using it; Karpelès shared photographs and a teardown walkthrough describing the suspected implant.

Ledger has not publicly confirmed a connection between the Singapore device and the earlier cases.

The device in the earlier reports was a Ledger Nano X; the Singapore device is a Ledger Flex, a different model.

The available reporting does not establish whether Metapod and CryptoBilis shared a supplier or whether the Singapore device is connected to the reported fund losses.

Unverified social media posts have described devices purchased directly from Ledger or used for years, as some Ledger users revisit older or unexplained cryptocurrency losses.

If the Singapore Flex implant is confirmed, it would differ from the first reported case on two attributes: model (Flex versus Nano X) and seller (Metapod versus CryptoBilis).