Hardware Wallets with Hidden eSIMs

You bought a Ledger Nano X. You set it up. You generated your seed phrase on the device's own screen, the way every guide tells you to. The Secure Element chip did its job. Nobody touched it. And then, slowly, your crypto disappeared anyway.[1]

Researchers at Tibane Labs have documented what they call the third generation of modified Ledger Nano X hardware wallets being sold to unsuspecting buyers. The devices look genuine. They function normally. But inside, someone has installed an additional chip, a tiny LTE modem, an eSIM, and a small antenna, all powered by the wallet's own battery. The extra hardware intercepts the signal between the Secure Element and the screen, reads the seed phrase as it is displayed, and transmits it over the cellular network to the attackers.[1]

$93 million and counting

Blockchain observers have identified over 300 affected wallets so far, collectively drained of approximately $93 million. Ledger has acknowledged to at least one customer that their device was manipulated and that they suffered financial loss. The company has not confirmed the full extent.[1]

The stolen cryptocurrency is exchanged and laundered through crypto mixers. The attackers do not need the Secure Element. They do not need to crack encryption. They just need to read the screen, which they do with an embedded Tempest attack, intercepting the electromagnetic emanations from the display interface to reconstruct the characters shown to the user.[1]

Three generations of implants

In May, embedded specialist Joe Grand presented at the Hardware.io conference what appeared to be hand-modified Ledger Nano X devices. The perpetrators had replaced the battery with a smaller one to make room for the extra electronics. The wiring was conspicuous, but only if you opened the casing, which users do not typically do.[2]

The second generation was more professionally designed but still used a replacement battery. The third generation, the one documented by Tibane Labs now, uses precisely cut parts in what appears to be series production. The original battery is untouched. The attackers found space by scratching away the foam that Ledger uses to protect the screen from below. Open the casing and you see what looks like an unmodified Ledger Nano X, except for a single small antenna wire.[1]

The dealer

Suspicion falls on Cryptobilis, a wallet dealer operating primarily in Southeast Asia from Malaysia. Ledger has prohibited Cryptobilis from further sales and advises anyone who purchased from them in the last three months to stop using the device immediately and move any holdings to another wallet. All Ledger dealers are now prohibited from offering returns to other customers, to prevent modified devices from re-entering the supply chain.[1]

Not every affected buyer knows they bought from Cryptobilis. Tibane Labs reports one manipulated device purchased via Amazon Japan from a Chinese seller but mailed from Malaysia. The crypto community reports that Cryptobilis recently changed ownership without announcement. According to unverified screenshots, the dealer has belonged to someone named JiaMing since August.[1]

The trust chain

A hardware wallet is supposed to be the point where you stop trusting software and start trusting physics. The seed phrase never leaves the device. The Secure Element is tamper-resistant. The screen shows you the truth. That is the pitch, and for most users it has been true.[1]

But the trust chain has a gap between the factory and your hands. If someone opens the device, installs a cellular radio, seals it back up, and sells it through what looks like a legitimate channel, the physics still works perfectly. The Secure Element is still secure. The screen still shows the seed phrase. The addition is not in the code, it is in the plastic. And the plastic is something nobody checks.[1]

300 wallets. $93 million. Three generations of implants, each one harder to detect than the last. The Secure Element was never the weak point. The supply chain was.[1]