Head of Brand Development // Curator @Ledger | My views are my own. Banner by @agoriamusic
Web3
Joined November 2018
- Tweets6.8K
- Following2.4K
- Followers6.8K
- Likes17.2K
Mo retweeted
Your everyday apps. Ledger security for the moments that matter. One device.
Meet Ledger Atom™, the world’s first device built to protect everything you value. Your everyday apps and 5G connectivity, with Ledger OS™ guarding your money, your messages, your identity and your agents, and a hardware-controlled privacy switch that cuts the camera and mic at the circuit level.
@_pgauthier, Chairman & CEO, @P3b7_, CTO, @iancr, Chief Human Agency Officer, @AWengroff, EVP Marketing & Communications, @AndrewsJohnG, CFO, and @sebadault, EVP @ledger_business, on how twelve years of Ledger signers led us here.
Plus: Ledger is @solanamobile’s first hardware expansion partner, with the Seeker app preinstalled on Ledger Atom. @Cyber50Defense is collaborating with us to explore how Ledger Atom can strengthen secure communications and privacy.
Mo retweeted
Three moments from Ledger Op3n 2026 you'll want to see.
Ledger Atom™: the security of industry leading hardware, the convenience of your everyday apps, plus control over your AI tools, and a rapidly expanding platform of apps, all in one quantum ready device.
Ledger Agent Intent: your AI agents propose, you approve, your Ledger signer enforces.
Ledger Platform: a rapidly expanding ecosystem that enables users to leverage industry leading security features and app connectivity, including direct access to Ledger Wallet™.
Mo retweeted
One agent wants to delete files. Another wants to deploy code. A third wants to move money.
With Ledger Agent Intent and @openclaw, all three land in one queue. You allow the routine ones once, and anything you haven't pre-approved waits for your approval on your Ledger signer.
Mo retweeted
Seekers, meet Ledger Atom™
@Ledger Atom ships with the @solanamobile Seeker app, combining the Solana dApp Store and wallet, putting 1,500+ Solana apps in front of Ledger users
Get yours today: ledger.com/seeker
Mo retweeted
Ledger just unveiled the Ledger Atom, a security-first phone running LedgerOS based on Android.
- Hardware switch that physically cuts cameras/mics
- Indicator whenever the secure enclave is in use
@Ledger says it’s not meant to replace your phone day one. Details coming soon!
Mo retweeted
Your wealth is digital. The device you manage it with should be built for that.
Meet Ledger Atom™: the security of industry leading hardware, the convenience of your everyday apps, plus control over your AI tools, and a rapidly expanding platform of apps, all in one quantum ready device.
Agents propose. You approve. Your Ledger signer enforces.
Mo retweeted
Tomorrow at Ledger Op3n, we’ll unveil our latest announcements on securing what matters most in the age of AI, Tokenization, Quantum and share where the Ledger platform is headed next. At the top of the event, our CEO @_pgauthier will also directly address the incident in Southeast Asia from this weekend.
Here’s what to expect:
Mo retweeted
How a company behaves when it is attacked says more about it than any product launch. Here is where we stand on the hardware implant attack: what happened, how we responded, and what we are changing.
Read the blog here, and watch the keynote live at 2pm CET: ledger.com/blog-response-har…
Mo retweeted
The reveal is happening today. Ledger Op3n 2026 is live from Paris.
Keynotes start at 2pm CET/8am ET.
xitter.cf/i/broadcasts/1OGwbnOVr…
Mo retweeted
I flew to Paris to talk to Charles Guillemet
(@P3b7_ ), CTO at @Ledger
I was concerned that the Ledger implant attack could be a worldwide exploit hitting tens of thousands of devices potentially impacting all of us
I am happy to say, that does not seem to be the case
From my discussion with Charles I understood the following:
• It's a physical attack on the actual hardware. Every device has to be opened by hand and fitted with a hidden implant. Then repackaged seamlessly.
• Each implant needs a custom PCB, an LTE modem and dedicated manufacturing
• The tempered devices have to be sent to buyers unnoticed.
This operation is “easy” with one reseller in one region but extremely difficult and expensive to expand to other regions / resellers.
The estimated cost to temper with a few hundred devices in one region are estimated to be more than $1M
The above makes it extremely unlikely that this is a global scale issue impacting thousands of devices
This is a targeted, expensive supply-chain attack, not a backdoor in every Ledger.
Devices bought from Ledger directly are not impacted
Mo retweeted
I've been using Ledger devices for many years, and the recent discoveries of hardware implants haven't changed my trust in them.
If anything, they've reinforced something I strongly believe in: you should be able to inspect the hardware you entrust with your Bitcoin.
Bitcoin was built around a simple principle: don't trust, verify.
That principle shouldn't stop at software or cryptography. It should extend to the physical devices holding our keys.
Sealed or tamper-evident designs are perfectly fine, as long as they're transparent and don't prevent independent inspection.
Ledger devices are relatively easy to open and examine. That's one of the reasons these malicious implants could be discovered and investigated.
No hardware wallet is immune to supply-chain attacks. But security shouldn't depend entirely on trusting the manufacturer or distributor.
Physical inspection isn't a guarantee of security, but it's an essential part of being able to verify what you're actually using.
Trust comes from the ability to verify, not from being told something is secure.
Mo retweeted
Update from Ledger Donjon on the CryptoBilis investigation 🔽
@DonjonLedger is investigating Ledger signers sold by CryptoBilis, a reseller in Southeast Asia, that contained an unauthorized hardware implant. Ledger confirmed this on October 10th for one affected user's signer. All confirmed fund losses tied to the incident disclosed on October 9th involve signers sold through CryptoBilis. We have not verified a drain linked to a signer bought elsewhere. CryptoBilis has confirmed it stopped selling Ledger signers while the investigation continues.
Based on the Donjon's analysis of the attack, the implant sits inside the enclosure and reads the data shown on the screen. During setup, the signer displays the 24-word recovery phrase. When the implant detects these screens, its microcontroller decodes the words and transmits them over LTE using a provisioned eSIM. The implant is a separate component. It does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures.
The Donjon will analyze the signers it receives and will share more as the investigation continues.
We have not confirmed the total number of affected users or the total value lost. Figures circulating online come from third parties and Ledger has not fully verified them. If your funds were drained and you have not contacted us, please do so through Ledger Support so we can include your case. We are also reviewing reports of implants in other signers and locations. We will continue to share information as the investigation progresses. Rest assured the Ledger team is going above and beyond to leave no stone unturned to investigate this situation to the strongest possible outcome.
If you bought a Ledger signer from CryptoBilis and have not set it up, do not set it up and contact Ledger Support. If you have set it up, transfer your assets promptly to a new signer with a new recovery phrase. Do not enter or restore any recovery phrase on a signer bought from CryptoBilis. Never enter your recovery phrase into a website, app or form.
If you lost funds or hold a tampered signer, contact Ledger Support at support.ledger.com and file a report with local law enforcement. Do not send the signer to anyone before speaking with Ledger Support or local law enforcement. If you lost funds, coordinate with law enforcement before opening the signer. Researchers and others with relevant information can write to [email protected].
If you did not buy from CryptoBilis and want to inspect the inside of your signer, the guide is at support.ledger.com/article/4…. Use caution and make sure your recovery phrase is backed up first, because opening a signer can damage it.
Ledger will never call you, message you directly, or ask for your 24-word recovery phrase. We will update this post when we verify new information.
Mo retweeted
Update on Ledger devices at MediaMarkt Saturn 🔽
As of Oct. 13th, MediaMarkt Saturn has stopped, with Ledger’s alignment, the sale of Ledger devices in their stores and online while the investigation continues, following the report of an implant from one customer in Germany. No loss of funds were reported.
We have no indication that Ledger's infrastructure, systems or services were compromised. Ledger Support is reviewing user reports, and Ledger’s cybersecurity experts, the Donjon will be examining the devices we receive: support.ledger.com.
If you have questions about a device you bought, contact Ledger Support at support.ledger.com. Ledger will never call you, message you directly or ask for your 24-word recovery phrase.
Many claims and figures circulating online are unverified. Scammers often try to take advantage of incidents like this. Rely only on official Ledger and MediaMarkt Saturn channels for updates. We will share more as the investigation continues.
Readers added context they thought people might want to know
Ledger claimed MediaMarkt Saturn stopped selling Ledger devices in stores and online as of Oct. 13. Reports show a store was still selling them hours later with staff unaware, and products remain listed on MediaMarkt sites.
x.com/0xJohannes_/st…
cointelegraph.com/news/mediamark…
mediamarkt.de/de/product/_le…
mediamarkt.at/de/product/_le…
Mo retweeted
Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.
Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).
Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.
Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.
For assistance or questions, contact Ledger customer support through our official channels: support.ledger.com
Mo retweeted
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
Mo retweeted
Every Apple security update now patches a zero-day already exploited in the wild...
AI flipped the security landscape. Defense is lagging, detecting what’s being used in the wild, then racing to patch it.
The elephant in the room: the vast majority of devices stay unpatched and will keep getting exploited.
And that’s before we even talk about exploit persistence. 🫠
Don't leave your valuables on your mobile phone, they'll get stolen.
🚨 Critical Apple CoreGraphics Zero-Day Vulnerability Actively Exploited in Attacks
Details: cybersecuritynews.com/apple-…
Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a critical zero-day vulnerability that it says may have been exploited in an extremely sophisticated attack against specifically targeted individuals.
The security issue, tracked as CVE-2026-86950, affects the CoreGraphics framework, a fundamental Apple component responsible for rendering graphics, images, and documents across iPhones and iPads.
Successful exploitation could allow attackers to execute arbitrary code on a vulnerable device by convincing a victim to process a maliciously crafted file. Apple released the updates on September 28, 2026, and urged users to install them as soon as possible.
#cybersecuritynews
