Former Mt. Gox CEO Mark Karpelès is developing an affordable security device designed to detect hidden spy implants inside Ledger hardware wallets, following reports of compromised cryptocurrency wallets linked to significant financial losses.
Karpelès announced the project on X, proposing a way for Ledger users to identify suspicious hardware modifications without opening or dismantling their devices. The initiative aims to provide cryptocurrency investors with an accessible method of checking wallet security amid growing concerns about physical tampering.
The proposed detector would use low-power radio signals and resonance testing to identify unauthorized antenna components potentially concealed inside Ledger wallets. Such implants could allow attackers to secretly transmit sensitive information, including cryptocurrency recovery phrases.
Karpelès also plans to release the device's printed circuit board (PCB) design and technical specifications publicly, allowing individuals to build their own security detectors at minimal cost.
However, the project remains under development, and Karpelès has not yet demonstrated a fully operational device independently verified by security researchers.
The announcement follows reports of a major Ledger hardware wallet security incident involving modified devices distributed through a reseller in Southeast Asia.
According to the reports, attackers obtained legitimate Ledger wallets, installed concealed electronic components, and reintroduced the compromised devices into circulation.
Ledger's security team reportedly identified implants capable of capturing users' 24-word recovery phrases during wallet initialization. The stolen information was allegedly transmitted to attackers through an LTE connection powered by an embedded eSIM.
Independent researchers estimate that cryptocurrency losses associated with the incident have exceeded $90 million, highlighting the potential financial consequences of compromised hardware wallets.
On October 15, Ledger addressed the situation, emphasizing that its secure chips, operating system, and servers had not been breached. Instead, the company attributed the incident to physical modifications made after devices left its direct control.
Ledger also announced tighter reseller security requirements, including restrictions on selling returned products and rules preventing devices from being openly displayed before purchase.
Karpelès' proposed detection tool could offer an additional security measure for Ledger users concerned about supply-chain attacks and unauthorized hardware modifications.
Although its effectiveness remains unverified, the project highlights increasing demand for affordable cryptocurrency wallet security solutions as investors seek stronger protection against sophisticated physical attacks.
