Singapore police said at least two cases involving tampered Ledger hardware wallets have resulted in losses of about S$3.5 million ($2.7 million) since September 10.

Preliminary investigations found that some Ledger devices purchased from local retail stores contained malicious hardware components capable of capturing users’ private keys or recovery phrases, potentially allowing attackers to access wallets and transfer cryptocurrency without authorization.

The disclosure adds to a widening investigation into suspected supply-chain compromises involving Ledger devices sold through 3rd-party retailers across Southeast Asia.

Ledger has asked resellers in

• Singapore,
• Malaysia,
• Indonesia,
• Thailand,
• the…