Galaxy

Secure

Security

Element

<p><a href="https://www.galaxy.com/insights/research/ledger-cryptobilis-wallet-implant-theft" rel="noopener noreferrer nofollow">Galaxy Research’s October 16 review</a> links that hardware attack to coordinated cryptocurrency withdrawals. It adds a detailed on-chain account of the losses to earlier disclosures from Ledger and independent researchers about how the implants operated.</p>
<div style="margin: 28px 0; padding: 22px 24px; background: #1f2937; border-left: 5px solid #ef4444; border-radius: 10px; color: #f8fafc;">
 <p style="margin: 0 0 10px; color: #fecaca;"><strong>What affected owners need to know</strong></p>
 <p style="margin: 0; line-height: 1.6;">Replacing the hardware is not enough if the recovery phrase was exposed. That phrase can restore the same wallet elsewhere. The required remedy is a newly generated phrase on trusted hardware, followed by a transfer of assets to addresses derived from it.</p>
</div>
<div style="margin: 28px 0; padding: 20px 22px; background: #f0fdf4; border: 1px solid #86efac; border-radius: 10px;">
 <p style="margin: 0 0 10px; color: #166534;"><strong>In brief</strong></p>
 <ul style="margin: 0; padding-left: 20px;">
  <li>Genuine Check authenticates the Secure Element; it does not inspect every component inside the device.</li>
  <li>The implant captured recovery words displayed during setup and sent them over its own cellular connection.</li>
  <li>Galaxy estimates that at least $91 million left 474 addresses within the scope of its research.</li>
  <li>A new PIN, factory reset or clean replacement device cannot revoke a recovery phrase an attacker already has.</li>
 </ul>
</div>
<h2 id="a-passed-genuine-check-did-not-mean-the-device-was-untouched">A passed Genuine Check did not mean the device was untouched</h2>
<p>Ledger’s Genuine Check is a cryptographic authentication process. Ledger’s server sends a challenge, and the device’s Secure Element responds with a signature that can be verified against Ledger’s manufacturing attestation.</p>
<p>That establishes that the responding Secure Element is genuine. The key used for this device check is separate from the owner’s wallet recovery phrase.</p>
<p>The distinction explains how the affected devices could pass the check. The attacker did not need to extract a secret from the protected chip or forge its response. The original Secure Element remained in place while separate hardware inside the device observed information reaching the screen.</p>
<p><a href="https://donjon.ledger.com/threat-model/device-genuineness/" rel="noopener noreferrer nofollow">Ledger Donjon’s documentation</a> sets out that limitation directly: Genuine Check cannot detect an unauthorized physical modification, including a spying implant, when the original Secure Element remains intact.</p>
<div style="overflow-x: auto; margin: 26px 0;">
 <table style="width: 100%; border-collapse: separate; border-spacing: 0; text-align: left; border: 1px solid #cbd5e1; border-radius: 10px; overflow: hidden;">
  <thead>
   <tr style="background: #0f172a; color: #ffffff;">
    <th style="padding: 13px;" scope="col">What an owner sees</th>
    <th style="padding: 13px;" scope="col">What it does establish</th>
    <th style="padding: 13px;" scope="col">What it cannot rule out</th>
   </tr>
  </thead>
  <tbody>
   <tr style="background: #f8fafc;">
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0;"><strong>Genuine Check passes</strong></td>
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0;">The Secure Element authenticated successfully.</td>
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0; background: #fff7ed;">Extra electronics around the original chip.</td>
   </tr>
   <tr>
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0;"><strong>Packaging looks untouched</strong></td>
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0;">There is no obvious external sign of interference.</td>
    <td style="padding: 13px; border-bottom: 1px solid #e2e8f0; background: #fff7ed;">Careful opening, modification and repackaging.</td>
   </tr>
   <tr style="background: #f8fafc;">
    <td style="padding: 13px;"><strong>The wallet works normally</strong></td>
    <td style="padding: 13px;">Its ordinary functions remain operational.</td>
    <td style="padding: 13px; background: #fff7ed;">A separate component collecting displayed information.</td>
   </tr>
  </tbody>
 </table>
</div>
<p>A successful result is still useful: it verifies the component designed to answer the challenge. It is not a physical inspection of the enclosure or a guarantee that nothing else has been added inside it.</p>
<h2 id="the-implant-watched-the-display-then-used-its-own-radio">The implant watched the display, then used its own radio</h2>
<p>Ledger’s earlier <a href="https://coindoo.com/ledger-confirms-unauthorized-implant-affected-device/" rel="noopener noreferrer nofollow">confirmation of an implant in an affected device</a> established physical tampering. Its subsequent explanation described a component that captured the 24-word recovery phrase during setup and transmitted it over LTE using an embedded SIM.</p>
<p><a href="https://www.tibane.net/research/ledger-nano-x-implant" rel="noopener noreferrer nofollow">Tibane Labs’ examination of Nano X specimens</a> provides more detail on the technique. Added circuitry monitored the screen’s data lines, reconstructed the displayed words and used a cellular modem to transmit them. It did not need a camera or the connected computer’s internet connection.</p>
<p>That matters because the recovery phrase is the wallet’s master backup. Once an attacker has a usable copy, they can restore the wallet in another environment and sign transactions there. The original Ledger device does not need to approve the later theft.</p>
<p>The specimens Tibane examined also show why a quick visual comparison is not a reliable safety test. One design concealed components beneath the display while retaining the original battery. Loose wiring, an unusually small battery or an altered exterior therefore cannot be treated as universal warning signs.</p>
<p>Those examinations document the implant method, not every device involved in the CryptoBilis incident. They do not establish that every compromised wallet used the same design or entered distribution through the same route.</p>
<div class="read-more pb-3 pt-3 pt-md-2 px-3 my-4 border bg-light">
 <h5 class="text-uppercase border-bottom mb-3 pb-1 d-none d-md-block">READ MORE:</h5><a href="https://coindoo.com/googles-advance-puts-bitcoins-exposed-keys-focus/" rel="noopener noreferrer nofollow">
  <div class="contentRight col-4"><span><img src="https://coindoo.com/wp-content/uploads/2026/01/google-search-312959125.jpg"></span>
  </div>
  <div class="contentLeft col-8">
   <h4 class="title mb-0">Google’s Advance Puts Bitcoin’s Exposed Keys in Focus</h4>
  </div></a>
</div>
<h2 id="a-copied-phrase-can-become-a-multi-chain-loss">A copied phrase can become a multi-chain loss</h2>
<p>Galaxy estimates that approximately $91 million left 474 addresses across Bitcoin, Ethereum, Arbitrum, Polygon and TRON. Its analysis excluded BNB Chain, which other trackers included, so Galaxy presents its figure as a floor rather than a complete incident total.</p>
<p>The Bitcoin withdrawals began on October 7. Across the assets Galaxy examined, about 88% of the value, roughly $80 million, moved during one hour beginning at 05:00 UTC on October 9.</p>
<p>That timing supports the view that the withdrawals were coordinated rather than unrelated losses. It does not show when every recovery phrase was captured, how long the attackers held the information or whether each affected owner used the same implant version.</p>
<p>The 474-address figure also is not a count of people, wallets or physically examined devices. A single owner may control multiple addresses, while blockchain tracing alone cannot establish which hardware was used for each wallet. The $91 million estimate is Galaxy’s on-chain assessment, not a Ledger-confirmed total or a compensation commitment.</p>
<h2 id="authorised-resale-reduced-risk-but-did-not-prove-a-device-was-untouched">Authorised resale reduced risk, but did not prove a device was untouched</h2>
<p>In its <a href="https://www.ledger.com/blog-response-hardware-implant-attack" rel="noopener noreferrer nofollow">October 15 response</a>, Ledger said attackers bought genuine devices, fitted hidden components and returned them to distribution through resellers in Southeast Asia. The company said its chip, operating system and servers were not compromised.</p>
<p>Ledger also said it requested sales suspensions from authorized resellers and distributors in Southeast Asia and Hong Kong. Its teams inspected devices bought from stores and warehouse samples, including checks in Germany, and reported that the units examined were clean.</p>
<p>The company has reiterated that returned devices must never be resold, even if they appear new and unopened. Its updated requirements tell retailers to keep stock away from shelves and display areas, hand it to buyers only at purchase, and report unusual products promptly.</p>
<p>Those controls reduce the chance that a handled device reaches a buyer. They also explain why “buy only from an authorized reseller” cannot be the whole answer: CryptoBilis had itself been listed as authorized.</p>
<p>Ledger’s <a href="https://www.ledger.com/academy/topics/ledgersolutions/best-practices-to-securely-buy-ledger-signer" rel="noopener noreferrer nofollow">purchasing guidance</a> separates two risks that are often conflated. Genuine Check remains relevant when assessing a counterfeit device; physical custody and distribution controls address a genuine device modified after it left the factory.</p>
<h2 id="what-does-and-does-not-protect-a-a-rel-noopener-noreferrer-nofollow-wallet-a-after-phrase-exposure">What does and does not protect a <a rel="noopener noreferrer nofollow">wallet</a> after phrase exposure</h2>
<div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 14px; margin: 26px 0;">
 <div style="padding: 18px; border: 1px solid #fecaca; border-radius: 10px; background: #fff1f2;">
  <p style="margin: 0 0 8px; color: #b91c1c;"><strong>New PIN</strong></p>
  <p style="margin: 0;">Protects physical access to the device. It does not replace the private keys derived from an exposed phrase.</p>
 </div>
 <div style="padding: 18px; border: 1px solid #fecaca; border-radius: 10px; background: #fff1f2;">
  <p style="margin: 0 0 8px; color: #b91c1c;"><strong>Factory reset</strong></p>
  <p style="margin: 0;">Does not remove a physical implant or erase words that may already have been transmitted.</p>
 </div>
 <div style="padding: 18px; border: 1px solid #fecaca; border-radius: 10px; background: #fff1f2;">
  <p style="margin: 0 0 8px; color: #b91c1c;"><strong>Old phrase on new hardware</strong></p>
  <p style="margin: 0;">Recreates the same wallet, leaving an attacker’s copy of the phrase valid.</p>
 </div>
 <div style="padding: 18px; border: 1px solid #bbf7d0; border-radius: 10px; background: #f0fdf4;">
  <p style="margin: 0 0 8px; color: #166534;"><strong>New phrase on trusted hardware</strong></p>
  <p style="margin: 0;">Creates new keys and new addresses to which assets can be moved.</p>
 </div>
</div>
<p>Ledger’s instructions for CryptoBilis buyers draw the same dividing line. Its <a href="https://x.com/Ledger/status/2109896739985453358" rel="noopener noreferrer nofollow">October 13 investigation update</a> told buyers not to set up unused units or enter an existing recovery phrase into them. Owners who had already initialized a device were advised to move assets to a new signer with a new recovery phrase.</p>
<p>For someone who suspects their phrase was exposed, the priority is to secure the wallet—not to prove whether the hardware has been altered. Fresh keys must be generated on trusted hardware, then assets must be sent to addresses controlled by those new keys. The suspect device should not generate the replacement wallet.</p>
<p>People who have lost funds or believe they hold a modified device should contact Ledger through its official support channels and coordinate with law enforcement before opening or shipping the hardware. Preserving a device may matter to an investigation, but informal disassembly is neither a complete safety test nor a substitute for moving funds secured by an exposed phrase.</p>
<p style="text-align: center;"><em>This article is provided for informational purposes only and does not constitute financial or investment advice. Follow current manufacturer guidance when handling a potentially compromised device.</em></p>
<p>The post <a href="https://coindoo.com/why-ledgers-security-check-failed-stop-hack/" rel="noopener noreferrer nofollow">Why Ledger’s Security Check Failed to Stop $91M Hack</a> appeared first on <a href="https://coindoo.com" rel="noopener noreferrer nofollow">Coindoo</a>.</p>

Why Ledger’s Security Check Failed to Stop $91M Hack

Table of Contents

Coindoo.com

Other articles published on Oct 17, 2026

Bitwise Now Holds More Than Half a Billion Dollars in $XRP

Hex Founder Richard Heart Detained in Istanbul on Finnish Interpol Red Notice

Bitget Stops Serving Some Users After $388M Incident

Riot Platforms Switches Its Bitcoin Custodian From NYDIG to BitGo Bank

SEI Perpetual Futures: Could the CFTC Filing Open New Doors?

fixCleanup3_4_0 goes live on the XRP Ledger on October 23, but lending still has no date

Join our free newsletter for daily crypto updates!