Ledger owners in Asia had their wallets drained: soldered implants in devices exfiltrated seeds
About two weeks ago, several owners of Ledger hardware wallets in Asia discovered outgoing transactions and empty balances. Researchers found soldered implants in these devices that read the screen contents and transmitted the seed phrase out through a cellular modem. Current information indicates that a single Ledger reseller in Asia made and installed the implants, then sold the devices to customers and other stores. Neither an authenticity check nor correct firmware detects this modification: the genuine device continues to operate normally while the added electronics remain unnoticed.
If you bought a hardware wallet from somewhere other than the manufacturer directly or an official partner — especially in Asia in recent months — stop using the device right now and disconnect it. Transfer funds immediately: create a new wallet with a new seed on a device you know you can trust, and move everything there; restoring the same backup on different hardware does not help, as the secret may already have leaked. Resetting the device and reinstalling firmware do not remove soldered electronics. Before connecting a new device, inspect the packaging and seals and stop if you have any doubts. Find support yourself through an official channel — real support never asks for your seed, backup or a transfer of funds to a “secure” wallet.