Ledger unveiled an $849 crypto device with new anti-tamper protections as it investigated coordinated thefts involving modified hardware wallets.
On Oct. 15, the French crypto wallet maker introduced Ledger Atom, which is a mobile device that combines everyday apps with hardware-protected crypto transactions. The company is accepting refundable $100 deposits for a Founders Edition priced at $849, with deliveries targeted for 2027.
The launch coincides with Ledger’s investigation into an organized criminal operation that secretly modified genuine hardware wallets before returning them to reseller distribution channels. The attackers allegedly captured customers’ recovery phrases and used them to drain cryptocurrency holdings in a coordinated operation.
Ledger Atom
In a separate security announcement, Ledger Chief Technology Officer Charles Guillemet said Atom includes an active protective shield designed to detect attempts to physically open, probe, or modify the device’s secure hardware.
The technology addresses a vulnerability exposed by the recent attacks, where malicious components reportedly intercepted information displayed during wallet setup without compromising Ledger’s security chips or operating system.
Guillemet explained that existing Ledger devices use cryptographic authentication to verify the integrity of their secure software. However, that process cannot detect an additional component secretly monitoring the screen.
Atom’s protective shield is designed to alert its Secure Element when someone disturbs the protected hardware, potentially detecting manipulation before a compromised device reaches a customer.
The device also represents Ledger’s attempt to expand beyond conventional hardware wallets into a broader consumer electronics market. It combines an Android-based environment for everyday apps with a separate Ledger operating system that controls private keys and approves transactions.
During sensitive operations, the secure processor takes control of the display, preventing ordinary applications from interfering with the final approval process. Users can also physically disconnect the cameras and microphones through a dedicated privacy switch.
Atom supports 4G and 5G data connections but lacks conventional cellular calling and SMS capabilities, limiting its ability to replace a smartphone. Ledger is positioning the product for users who want integrated crypto management, digital identity services, and secure applications.
The company has also partnered with Solana Mobile to preload its Seeker application, giving Atom users access to the Solana decentralized application ecosystem.
Ledger tightens distribution controls
The new security measures come as Ledger confronts questions about the integrity of its existing distribution network.
In an Oct. 15 statement, the company said criminals spent months purchasing genuine devices, installing custom-built components, and returning the modified products to distribution through Southeast Asian resellers.
The operation involved dedicated infrastructure to collect stolen recovery phrases, transfer cryptocurrency, and launder proceeds, according to Ledger. The company said the attackers invested millions of dollars in preparing the operation before executing the thefts.
Ledger maintained that its internal systems, chips, and operating software remained secure, attributing the attacks to device manipulation after they left its control.
The investigation has prompted Ledger to ask authorized resellers and distributors across Southeast Asia and Hong Kong to suspend sales. The company also examined devices purchased from stores and warehouse samples, reporting that the inspected units showed no signs of compromise.
Meanwhile, new blockchain intelligence has revealed an unusual victim of the thefts.
According to blockchain analytics firm Chainalysis, one of the largest victims was allegedly a scam operator who lost more than 60 Bitcoin, worth approximately $4.8 million, after accumulating the funds through a fraudulent online employment scheme.
The operation reportedly paid participants to create artificial sales and reviews for legitimate products. Victims were subsequently shown negative account balances and instructed to deposit their own money before receiving their promised earnings.
Chainalysis said the suspected operator transferred the proceeds to three separate Ledger addresses on Sept. 22. On Oct. 9, the operator emptied all three wallets through individual transactions, sending the Bitcoin to the same destination address, which investigators identified as holding stolen funds.
The discovery adds another layer to the investigation, linking proceeds from an alleged consumer fraud operation to the broader wallet theft. It also provides investigators with an identifiable trail of funds as Ledger works with law enforcement and blockchain security researchers to trace the attackers.
The security incident has already forced changes to Ledger’s reseller operations. Authorized sellers have been reminded that they must never resell returned devices, regardless of their apparent condition. New requirements also prohibit displaying products on store shelves, while unusual customer reports must be escalated to the company.
Those restrictions could complicate retail distribution as Ledger prepares to introduce a substantially more expensive product to its existing customer base.
