Ledger used its annual Op3n keynote in Paris on October 15 to address a hardware implant scandal that has rattled its distribution network, publishing a detailed account of the attack alongside the unveiling of a new device, Atom.
The company had confirmed a week earlier that Nano X devices resold through a Southeast Asian distributor contained hidden hardware implants. In a blog post titled "response-hardware-implant-attack," Ledger said a criminal group purchased genuine devices, opened the cases to insert concealed components, and captured recovery phrases as users went through setup. According to Ledger, the attack occurred at the distribution channel level and did not involve any flaw in its chip, operating system or servers.
Ledger's internal security lab, Donjon, dismantled one of the implants and found it read the 24-word recovery phrase displayed on screen during setup, then exfiltrated it over LTE using an eSIM, without interacting with the device's Secure Element. Ledger said teams made test purchases in Germany and found all examined units clean. On-chain analysts have traced roughly $103 million moved through Tornado Cash and Zcash in connection with the case, a figure Ledger has not confirmed.
The company has tightened requirements for authorized resellers, who must now keep stock in storage rather than displayed on shelves, hand over boxes only at the point of purchase, and report unusual returns immediately. Retailers have already begun adjusting: MediaMarktSaturn pulled devices from European shelves on Monday, though it said it found no link between its stock and the implicated distributor. OneKey dropped its distributor, CryptoBilis, and is offering free replacements to affected customers. Trezor has reduced the size of its reseller network.
Atom, a wallet built for the smartphone era
Against that backdrop, Ledger introduced Atom, a smartphone-format hardware wallet priced at 849 euros for its Founders edition, with delivery expected in summer 2027 pending certification. The device will be sold exclusively through Ledger's own website.
Atom runs an open-source Android build alongside an isolated Ledger operating system, with an EAL6+ certified Secure Element chip and an FPGA physically separating the two environments. A secure bar controlled by the Secure Element displays transactions for validation, and a physical switch cuts the camera and microphone at circuit level. The device also includes encrypted messaging with preparation for post-quantum cryptography, and will ship with Solana Mobile's Seeker app, making Ledger the first hardware partner of Solana Mobile. Integration with OpenClaw and Ledger's own Agent Intent feature will let users physically approve transactions proposed by AI agents.
Ledger said Atom includes anti-tamper protections absent from earlier models, including case-opening sensors, a paired back cover, sealed packaging and sensors powered by a dedicated battery even when the device is switched off. These protections do not extend to the Nano X, Flex or Stax devices already in circulation.
