Summary
Ledger, the manufacturer of the most widely deployed hardware cryptocurrency wallets, is investigating reports of potential wallet tampering following user reports of unauthorized transactions on devices that had not been connected to any software wallet or browser extension. Tether has frozen approximately $90 million in USDT linked to the suspected tampering incident. The combination of unauthorized transactions on physically isolated hardware wallets and a $90 million Tether freeze indicates a serious incident whose mechanism has not yet been publicly confirmed by Ledger.
Timeline
| Date | Event |
|---|---|
| Oct 10, 2026 | Users report unauthorized transactions on Ledger hardware wallets; Ledger opens investigation; Tether freezes $90M in linked USDT; CoinDesk and Cryptoslate report |
What Happened
Hardware wallets are designed to hold private keys in an isolated secure element that never exposes keys to internet-connected devices. Unauthorized transactions on a properly used hardware wallet without physical access or user authorization would represent either a firmware compromise, a supply chain attack in which tampered devices were shipped to users, or a previously undisclosed vulnerability in the Ledger secure element or communication protocol.
The $90 million Tether freeze indicates the stolen funds have been identified on-chain and Tether has taken the unusual step of freezing them — a capability Tether has but uses selectively. Ledger’s hardware wallets are used by an estimated 6 million people globally and hold a significant portion of retail self-custody cryptocurrency. A confirmed hardware wallet compromise at Ledger’s scale would represent one of the most significant cryptocurrency security events in history. The investigation is ongoing and the attack vector has not been confirmed.
Domain Intelligence
ledger.com — 61.97
ledger.com scores in the low-trust range at 61.97 with T6_CORROBORATED_MODERATE and T6_TWEETFEED_FLAGGED flags — two independent corroborating intelligence source observations. Ledger is the manufacturer of the affected hardware wallets and the party conducting the investigation.