Ledger Unveils $849 Wallet Phone After Modified Devices Drained Funds

Ledger introduced its $849 Atom device with anti-tamper protections as it investigates modified wallets allegedly used to steal customers’ recovery phrases and cryptocurrency.

Ledger introduced Atom, an $849 mobile device for crypto management, on Oct. 15 while investigating an organized operation involving modified hardware wallets distributed through resellers in Southeast Asia and Hong Kong.

The company is accepting refundable $100 deposits for the Atom Founders Edition. Deliveries are scheduled for 2027. The device combines an Android-based environment for everyday applications with a separate Ledger operating system that manages private keys and approves transactions.

Atom includes an active protective shield designed to detect attempts to open, probe or modify its secure hardware. Ledger Chief Technology Officer Charles Guillemet described a system that can alert the device’s Secure Element when the protected hardware is disturbed.

The protection addresses a weakness exposed by the reported thefts. Ledger’s investigation found that the modified wallets did not compromise its security chips or operating system. Instead, added components reportedly monitored information displayed during setup, including customers’ recovery phrases.

Existing Ledger devices use cryptographic checks to confirm that their secure software has not changed. Those checks cannot detect an extra component that monitors the display. During sensitive transactions, Atom’s secure processor takes control of the screen so ordinary applications cannot interfere with the final approval.

Users can disconnect Atom’s cameras and microphones with a physical privacy switch. The device supports 4G and 5G data connections but does not offer standard cellular calls or text messages. Ledger is marketing it for crypto management, digital identity services and secure applications. A partnership with Solana Mobile will allow the Seeker application to be preloaded, providing access to Solana’s decentralized application ecosystem.

In a separate Oct. 15 security statement, Ledger described an operation in which criminals spent months buying genuine wallets, installing custom-built components and returning the devices to distribution channels. The company reported that the operation used dedicated systems to collect recovery phrases, transfer stolen cryptocurrency and launder the proceeds. The attackers allegedly spent millions of dollars preparing it.

Ledger maintained that its internal systems, security chips and operating software remained secure. The company attributed the thefts to physical manipulation after the devices left its control.

The investigation prompted Ledger to ask authorized resellers and distributors in Southeast Asia and Hong Kong to suspend sales. The company examined devices purchased from stores and samples from warehouses and found no signs of compromise in the units inspected.

Authorized sellers have been instructed never to resell returned devices, regardless of their condition. New requirements prohibit displaying products on store shelves, and unusual customer reports must be referred to Ledger.

Blockchain analytics firm Chainalysis identified one of the largest alleged victims as a suspected operator of an online employment scam. The operator lost more than 60 Bitcoin, worth about $4.8 million at the time described in the investigation, after transferring the funds to three Ledger addresses on Sept. 22.

The suspected scheme paid participants to create artificial sales and product reviews. Participants were later shown negative balances and told to deposit their own money before receiving promised earnings. On Oct. 9, all three wallets were emptied in separate transactions, sending the Bitcoin to one address that investigators linked to stolen funds.

Ledger is working with law enforcement and blockchain security researchers to trace the operation.

Articles by this author