How a Hidden LTE Chip Turned Real Ledgers Into Seed Phrase Thieves: Uneasy Money

The conversation centers on a sophisticated Ledger supply-chain compromise in which genuine Ledger devices bought through a reseller allegedly contained a hidden LTE modem and eSIM that intercepted seed phrases and exfiltrated them over a cellular data plan. The panel argues this attack was far more dangerous than earlier counterfeit-device scams because it passed Ledger’s genuineness checks, appeared to be real hardware, and moved through a legitimate distribution channel. They estimate losses at roughly $70 million to $100 million over four to five months and stress that the immediate response should be caution, not panic.

A major theme is operational security: the panel repeatedly urges users not to rashly move funds, to use multiple storage locations, and to prefer multisig or secret-sharing schemes over a single seed backup. They also frame hardware wallets as a tradeoff that narrows attack surfaces but cannot eliminate human error or supply-chain risk.

The discussion then broadens to AI-era security, including a bizarre OpenAI eavesdropping case, an XRP infinite-mint bug and its $250,000 bounty, and StarkNet’s push to become an L1. The panel argues that L2s helped when Ethereum blockspace was scarce, but that the future may belong to simpler, more integrated wallet and chain designs, especially as AI changes how people interact with crypto.