Ledger plans to deliver the Android device Atom in mid-2027. After incidents of tampered devices in the distribution channel, it will integrate anti-tamper detection, AI authorization, and Solana applications into one device.

Written by: ChandlerZ, Foresight News

On October 15, crypto hardware wallet manufacturer Ledger launched Atom in Paris, a new device capable of running daily Android applications while also switching to an independent secure environment for asset management. The initial reservation price is set at $849, with users able to pay a refundable deposit of $100, expecting delivery in mid-2027.

Ledger's previous products were mainly used for storing private keys and confirming transactions, requiring users to connect their mobile phones or computers to operate. Atom combines applications and signing devices, launching at a time when the company is investigating incidents of tampering involving the dealer CryptoBilis, where attackers implanted additional hardware into genuine wallets to steal assets after capturing recovery phrases. Ensuring user confidence in purchasing and using a multifunctional device has become an unavoidable topic surrounding this product launch.

Can run Android applications but cannot make regular phone calls

Atom operates on a system based on the Android open source project, capable of running social and communication applications. When dealing with private keys, payments, and transaction approvals, it switches to a security mode controlled by Ledger OS.

The official website also clarifies that Ledger Atom is not a smartphone. It is a pure data mobile device that only supports connecting to 4G/5G networks for data transmission and does not support cellular voice calls, including VoLTE, VoNR, VoWIFI, and SMS. Therefore, users cannot make or receive calls using Ledger Atom over the mobile network. Even with a SIM card or eSIM card installed and within network coverage, it cannot be used to dial emergency service numbers (e.g., 112 or 911).

Having both daily applications and a wallet on the same device raises a direct issue. If the Android application is attacked, will the payment address seen by the user still match the actual signed transaction?

According to the architecture released by Ledger, the Android system operates on the main processor, while Ledger OS runs on a separate security chip, also controlled by dedicated circuits that manage screen display. Upon entering security mode, the screen is taken over by Ledger OS, and a security indicator lights up, allowing the user to verify and approve transactions within this environment. Regular applications can submit transaction requests, but according to this design, they cannot alter the content displayed in security mode.

Users still need to verify the request itself; submitting a harmful transaction via a malicious application and tampering with the screen to mislead the user into signing are two different kinds of attacks. After the device displays the real transaction, the holder still needs to recognize the recipient, amount, and authorization details. Ledger further explains that hardware protection applies to certain built-in applications and those integrated with cooperative applications, while the availability of daily applications will be confirmed after certification and authorization are completed.

Legitimate wallet implanted with a chip, Atom adds shutdown anti-tamper detection

In a previous security incident report, Ledger stated that attackers purchased genuine devices, disassembled them, and installed custom components, then returned the devices to the market through Southeast Asian distribution channels. These components capture recovery phrases when the user initializes the wallet. Once attackers have this set of words for wallet recovery, they can restore the wallet on another device and transfer assets without needing the original hardware wallet.

Why did existing authenticity verification fail to stop it? Ledger's Chief Technology Officer Charles Guillemet explained that cryptographic certification can verify the legality of the code within the security chip but cannot detect an implant eavesdropping on the screen nearby. Attackers can retain the original security chip while using additional hardware to read sensitive information.

According to the official website, Atom will add protective structures around sensitive components to identify attempts to disassemble the screen or back cover through sensors, and use packaging that reveals signs of tampering. The anti-tamper detection is equipped with an independent battery that can still operate when the device is turned off. Ledger states that these measures address the screen-eavesdropping implants involved in the current incident, but the effectiveness of the protection remains to be verified with the actual device.

Additionally, the sales arrangements have tightened, with Atom initially sold only through Ledger's official website. In terms of existing channels, the company has requested authorized dealers and distributors in Southeast Asia and Hong Kong to cease sales and reiterated that returned devices, even if they appear unopened, must not be resold.

OpenClaw ready for operations, user management authorization

Atom plans to pre-install OpenClaw and connect it to Ledger Agent Intent. This tool consolidates operations submitted by different AI agents into a single approval interface, allowing users to view requests before deciding to approve, deny, or grant ongoing authorization, with private keys retained within the Ledger device.

Ledger's demonstration includes enabling AI to monitor invoices and prepare payments, as well as submitting payment requests after shopping. For users running multiple agents simultaneously, requests such as file deletion, code deployment, and transfers can be queued for processing, and agents do not need to wait for user responses after submitting requests.

Ledger allows users to approve requests one by one but also enables some operations to be executed according to pre-set rules. For instance, the payment tool demonstrated by the company can automatically pay small API call fees within a budget set by the user. Therefore, users not only need to check individual transactions but also manage the range and budget for automatic execution.

This set of tools is already supported by some existing Ledger devices. Atom offers a way to consolidate application running, request viewing, and hardware approval into one device, allowing users to try AI approval features without waiting for new hardware delivery.

Solana brings the app store to other manufacturers' devices

Solana Mobile has become one of the first partners for Atom, labeling Ledger as its first hardware expansion partner. Previously, this company launched the Saga and Seeker phones; starting in March this year, it began opening its mobile technology stack to other Android manufacturers.

Under the partnership arrangement, the Solana wallet and app store will merge into the Seeker application, pre-installed on Atom, with transaction signatures completed through Atom's secure mode. Solana Mobile disclosed that it has sold over 200,000 devices, with a cumulative transaction volume exceeding $13 billion, and the app store has over 1,500 applications covering scenarios such as trading, payments, and gaming.

As a result, Ledger can access a batch of existing applications, reducing the content gap in the early phase of the new device's market entry. Solana developers can also reach Ledger users through the same app store without limiting their audience to Solana Mobile's own phones. Ultimately, whether users purchase Atom will depend on comparing the additional security features with the device price and their willingness to carry another device that cannot make regular phone calls.

Currently, Atom is still in the development and reservation stage. Ledger has set the delivery time for mid-2027, with specific applications, certifications, and final specifications to be confirmed before shipment, allowing pre-order users to cancel their orders before delivery.