The Spy Beneath the Screen
When a genuine secure element confirms authenticity, but a rogue cellular implant sniffs recovery words directly from the display bus.
A genuine hardware wallet, purchased brand-new from an authorized reseller, can quietly pass every official software verification check while simultaneously delivering its owner's recovery seed straight into the hands of remote attackers.
That is the sobering reality documented in Federico Rivi's detailed investigation into compromised Ledger devices originating from Southeast Asian authorized reseller CryptoBilis. In affected units, attackers added an intercept circuit beneath the display screen. The device's Secure Element—the hardened microcontroller executing cryptographic routines—remained completely original and untouched. But when the unit generated recovery words and pushed pixels to the display, the hidden circuit captured the bus signals, assembled the words, and broadcast them over an embedded cellular eSIM.
As Rivi explained, the computer may be clean and the owner may have followed every precaution for storing the backup, but the copy is made earlier, inside the device. The core dilemma is the fundamental gap between cryptographic authenticity and physical integrity. As Ledger's Donjon security research group made clear in their documentation, the automated genuineness check confirms that the genuine chip remains intact; it does not detect foreign hardware spliced into peripheral traces. Customers who kept their seeds strictly on paper and operated entirely offline still watched their balances drained.
The reverberations across the industry have been swift. Competitor Trezor moved quickly to scale back its authorized reseller distribution channels, terminating contracts by January 2027 to narrow the attack surface of physical transit. Meanwhile, unverified reports of compromised retail stock in Germany led to temporary sales halts before retail inspections found no tampering, prompting researcher Kevin Loaec to walk back early alarms.
For affected owners, security guidance is uncompromising: importing old seed phrases into fresh hardware merely restores keys that may already be compromised. True safety requires new entropy generated on clean, trustworthy hardware, followed by a swift on-chain sweep of all assets.
