Tampered Ledger wallets cost Singapore users $2.7M: Police

Police say at least two cases were reported as early as Sept. 10, nearly a month before the wider incident became public.

Singapore police say at least two cases involving tampered Ledger hardware wallets have been reported since Sept. 10, with combined losses of about 3.5 million Singapore dollars ($2.7 million), placing local reports almost a month before the wider incident became public.

In an advisory published Wednesday, the Singapore Police Force said preliminary investigations found malicious hardware components in Ledger wallets purchased from some retail stores in Singapore.

The disclosure adds both a local loss figure and an earlier reporting date to the incident, which surfaced publicly on Oct. 9 following reports of losses involving devices sold through CryptoBilis, an authorized Ledger reseller in Indonesia, Malaysia and the Philippines.

Days later, former Mt. Gox CEO Mark Karpelès said that a Ledger Flex purchased at Singapore’s airport contained a spy implant.

Another Ledger user claimed to have a tampered device bought from local IT retailer Challenger. The user said he was later sent a new device from Ledger.

On Oct. 13, Ledger said it had asked retailers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to suspend sales of Ledger devices while investigations were ongoing.

Singapore police said they were in contact with Ledger, which was reviewing the affected cases, while police investigations continued.

Source: Cointelegraph