Ledger's Donjon describes LTE-eSIM implant; MediaMarktSaturn pulls devices across Europe

Ledger's Donjon security team on October 13 gave the first vendor description of the hardware implant found in a CryptoBilis-sold signer: a separate microcontroller inside the device enclosure that reads the 24-word recovery phrase from the screen during setup and exfiltrates it over LTE through a provisioned eSIM. The disclosure went up on X and was carried by CoinDesk and Decrypt. The same day, MediaMarktSaturn, parent of the MediaMarkt and Saturn chains, pulled Ledger from every store and website in every country it operates — a group-wide precautionary withdrawal while Ledger investigates two tampered units reported by a single German buyer.

What the Donjon says the implant does

Three technical claims from Ledger's post, as reported by CoinDesk and Decrypt:

• A separate component sits inside the device enclosure. It is not part of the Secure Element and does not run Ledger's operating system.
• When the setup flow displays the 24-word recovery phrase on the screen, the implant's microcontroller reads and decodes the words.
• A provisioned eSIM transmits the decoded words out of the device over LTE cellular data.

Ledger adds that the implant does not modify the Secure Element, does not touch the Ledger OS, and does not alter transactions or signatures. The company calls it a physical supply-chain attack, not a breach of its software or internal systems. CTO Charles Guillemet said on X that Ledger "is reviewing its reseller controls and anti-tamper protections"; CEO Pascal Gauthier said the "investigation is ongoing to determine who tampered with these signers or where in the distribution chain it happened."

The mechanism matches the class of attack this site covered on October 10, after Mark Karpelès posted photos of a Nano X bought in Malaysia with a secondary board carrying an LTE modem, eSIM and antenna — full write-up here. What is new is that Ledger has now put its own name to the "LTE + eSIM + screen-reader" description, previously carried only through third-party research and photos.

MediaMarktSaturn pulls Ledger across Europe

A MediaMarktSaturn spokesperson, cited by Cointelegraph via Decrypt and Cryptoast, confirmed the withdrawal: "Les produits ont été retirés de notre gamme dans l'ensemble de nos pays" — the products are off the shelves in every country where the group operates — "par mesure de précaution." The chain is MediaMarkt's and Saturn's parent and runs stores across Austria, Belgium, Germany, Greece, Hungary, Italy, Luxembourg, the Netherlands, Poland, Spain, Sweden, Switzerland and Turkey.

Ledger said on X that the pause was coordinated with it and followed a German buyer, who posts on X as @0xJohannes_, reporting two Ledger units bought at two different MediaMarkt stores both containing internal modifications and inbound cables he associates with an LTE module. Ledger says no funds have been lost in that German case and it has no indication that its infrastructure or direct sales were compromised. Confirmed thefts, Ledger maintains, still only trace to devices sold by CryptoBilis, the Southeast Asian reseller that paused all hardware-wallet sales after October 9.

The analyst Darkfost has, separately, suggested that European retailers supplied by the distributor Aqipa GmbH — including the MediaMarkt-adjacent Saturn, Fnac-Darty, Boulanger and MediaMarkt Switzerland — could be worth examining; Aqipa has been an official Ledger distributor since August 2023. No compromise has been shown at those retailers, and Ledger has not endorsed the Aqipa-centred reading. Fnac-Darty and Boulanger did not respond to a Cryptoast query.

Where the money is and what else moved

• Onchain investigator Specter has traced over $86M across Ethereum, Tron and Bitcoin to this cluster.
• Bitquery estimates $92.9M across 311 wallets and five chains. CoinDesk's version cites "up to $93.2M" across more than 300 wallets.
• Tether froze $10M in USDT linked to the theft. The cluster earlier swapped part of its USDT into USDD via SUN.io to escape Tether's blacklist — prior post.
• Ledger has not endorsed any single loss figure and continues to say the circulating totals come from unverified third parties.

The Donjon has not published a device-level teardown with photos or a bill of materials. Ledger has also not named a specific affected model; the public artefacts so far reference a Ledger Flex (Karpelès's Singapore Airport unit) and generic "signers."

What to watch

1. A Donjon teardown with photographs and a bill of materials. The attack-chain description now needs the physical evidence to match it, including which board the eSIM sits on and which carrier IMSI it provisions.
2. Any confirmed European-retail compromise beyond Johannes's two units. MediaMarktSaturn's pull is precautionary; a second named buyer with a tampered device from a European storefront would convert it to a confirmed European supply-chain breach.
3. Trezor and Tangem. Both brands sell through CryptoBilis in Southeast Asia and have paused there, but neither has issued its own advisory on potential implants. Trezor said separately this week it is trimming its reseller network after supply-chain scares.
4. Aqipa GmbH's position. The distributor's silence on whether units it shipped to Saturn, Fnac-Darty and Boulanger are being inspected is a gap. Ledger's own list of authorised distributors is a reasonable next check for buyers.
5. The next on-chain movement. Specter's and Bitquery's clusters have been quiet since the Tether freeze; the next hop out of USDD or any Monero-style conversion is the signal to watch.

Context

Supply-chain tampering of hardware wallets is now a confirmed loss event with nine-figure damage and a documented transmission channel. The retail footprint is now larger than CryptoBilis alone — MediaMarktSaturn pulled Ledger across Europe out of precaution, not because of a confirmed European compromise, and that precaution is itself part of the news. For buyers of any hardware wallet, the operative assumption has moved from "sealed box from an authorised reseller is safe" to "the Secure Element attests the chip, not the enclosure that houses it." Until a vendor exposes a user-side physical attestation that covers the whole mainboard, every category member carries this residual risk.