The elephant in the room. This Thursday, October 15, Ledger opened its annual Op3n keynote on a heavy subject. A week after confirming hardware implants in Nano Xs resold by a Southeast Asian distributor, the Frenchman published his official response. Then he unveiled a new device called Atom. A sequence that raised eyebrows in part of the community.
The key points of this article:
Ledger has released its official response to the hardware implant attack affecting its distribution channel.
The company says it has conducted its largest internal investigation and is tightening rules for its authorized resellers.
Ledger unveiled Atom, a device in smartphone format, sold for 849 euros in the Founders edition.
Ledger expects deliveries for summer 2027, subject to certification, with sales reserved for its official website.
Ledger's response, a week later
In a blog post published the same day as the keynote, the company returns to the facts. An organized crime group allegedly purchased real devices, then opened their cases to slide hidden components inside, capturing the recovery phrase during setup. The compromised devices were then recirculated through resellers in Southeast Asia. Ledger claims that no flaws affect its chip, operating system or servers, and places the attack on the distribution channel, once the devices are out of its control.
So, the Ledger Dungeon, its security laboratory, dismantled the implant and described how it works. The component read the 24-word phrase displayed on the screen during setup, then exfiltrated it over LTE via an eSIM, without touching the Secure Element. The teams also carried out sample purchases in Germany, and each unit examined was found to be clean. On-chain analysts are quantifying the damage, with around $103 million already traced through Tornado Cash and Zcash. Ledger does not confirm this total.
Faced with the controversy, the firm is tightening the screws. From now on, its authorized resellers must keep products in stock rather than on shelves, return boxes at the time of purchase and immediately report any unusual returns. For its part, MediaMarktSaturn had removed the devices from its European shelves on Monday. OneKey has also dropped the distributor CryptoBilis and is offering free replacements to its own customers. Trezor, for its part, has reduced its network of resellers.
A device designed against implants
The calendar is all the more talked about as the event was postponed for a long time. The Op3n keynote is held every year in October in the Paris offices. The invitations go out in the summer, well before the affair becomes public, which inevitably fuels suspicions of opportune timing. Still, the coincidence serves the narrative, the product presenting itself as a direct response to the scenario of the week.
Announced on stage, Atom takes the form of a smartphone that is not one. The device runs open source Android alongside a Ledger OS isolated on an EAL6+ certified Secure Element chip, an FPGA physically separating the two environments. In addition, a secure bar controlled by the Secure Element displays transactions to be validated, while a physical switch turns off the camera and microphone at the circuit level, and Ledger adds encrypted messaging with preparation for post-quantum cryptography.
On the ecosystem side, the device will include Solana Mobile's Seeker application, with Ledger becoming the first hardware partner of Solana's mobile branch. Additionally, the OpenClaw and Ledger Agent Intent integration will make it possible to physically approve transactions proposed by AI agents. Our teams should be able to take the device in hand in the coming months for a complete test.
Finally, Ledger highlights protections designed for this attack scenario. Sensors detecting the opening of the case, paired back cover, sealed packaging. The sensors remain powered by a dedicated battery, even when the device is turned off. However, these mechanisms do not concern the existing fleet of Nano X, Flex and Stax already in circulation. Owners of these devices are still invited to check their equipment and save their sentence before any manipulation.
There remain the gray areas. Ledger claims to have no knowledge of where the hacking of the boxes took place, while the reports at MediaMarkt are not linked to the incriminated distributor. Therefore, the real answer for current users remains the investigation and sanitation of the distribution chain. Deliveries of Atom will not arrive until summer 2027, for a price significantly higher than Stax.
