Skip to content
Basis Desk

New: Basis Desk Verify for Chrome & Firefox — fact-check crypto news on any page, free.Get the extension →

Security & Hacks · 1 min read

Singapore Police Warn of Tampered Ledger Wallets After $3.5M in Crypto Stolen

At least two victims lost funds after retail hardware devices modified with malicious components intercepted recovery phrases.

Editorial oversight: Julian Mercer, Chief Editor
Bearish

At a glance Guidance

What happened
Singapore police issued an advisory after tampered Ledger wallets bought in retail stores led to $3.5 million in thefts across two cases.
Why it matters
The presence of malicious components in retail hardware wallets exposes physical supply-chain vulnerabilities in consumer self-custody tools.
Who is affected
Crypto owners in Singapore purchasing hardware wallets from third-party retail stores and Ledger.
What's next
Singapore police and Ledger are continuing their investigation into the affected cases and retail sources.
Primary source
police.gov.sg: Police Advisory On Tampered Cryptocurrency Hardware Wallets

Key points

  • Singapore Police Force reported at least two cases of tampered Ledger hardware wallets leading to $3.5 million in total losses.
  • Malicious components inside devices purchased at Singapore retail stores captured users' private keys and seed phrases.
  • The SPF is actively investigating the incidents in contact with Ledger, which is reviewing the affected units.

The Singapore Police Force (SPF) issued a public advisory on Oct. 28, 2026, warning of compromised Ledger hardware wallets following the theft of roughly $3.5 million across at least two reported cases 1.

According to preliminary investigations by the SPF, victims purchased Ledger devices from local retail stores in Singapore that contained malicious hardware modifications 1. These physical components intercepted private keys and recovery phrases, enabling unauthorized actors to drain crypto holdings without user authorization 1. The first incidents were detected starting on Sept. 10, 2026 1.

Police Coordinate with Ledger as Inquiries Continue

Singapore authorities confirmed that active investigations remain underway and that police officials are liaising directly with Ledger, which is currently reviewing the reported incidents 1. The advisory urges cryptocurrency owners to cease using any devices suspected of physical tampering, avoid entering recovery phrases into compromised hardware, and immediately sweep remaining balances to uncompromised wallets generated on verified units 1.

The SPF also cautioned owners against sharing seed phrases under any circumstances, noting that neither wallet manufacturers nor law enforcement agencies will request private keys 1. The incident emphasizes the persistent physical supply chain vulnerabilities facing self-custody holders, even as market participants routinely turn to hardware devices to mitigate remote cyber risks 1. At the time of writing, major crypto markets traded lower, with $BTC changing hands at $79,749 and $ETH at $2,302.

Questions this story raises

How did attackers steal funds from the Ledger wallets?
According to Singapore police, retail devices were fitted with unauthorized malicious hardware components that captured private keys and recovery phrases directly.
What actions should owners of suspected devices take?
The Singapore Police Force advises stopping all transactions on suspected units, withholding seed phrases, and immediately moving assets to a fresh wallet on a secure device.

Sources

  1. [1] Police Advisory On Tampered Cryptocurrency Hardware Wallets — police.gov.sg, October 29, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.