[Ledger Hardware Supply Chain Attack May Be Exposed Before Large-Scale Wallet Fund Transfers, Former Mt. Gox CEO Mark Karpelès Issued a Warning] Odaily Planet Daily reports, according to Bitcoin News monitoring, former Mt. Gox CEO Mark Karpelès publicly disclosed physical tampering of Ledger devices embedded with hidden surveillance implants, which may have inadvertently triggered coordinated fund transfers across multiple wallets. On October 8, Karpelès warned that counterfeit or tampered Ledger devices with hidden SIM cards are being sold on the market, and these SIM cards can transmit stolen mnemonic phrases. The embedded devices are reportedly capable of intercepting data sent to the device screen, thereby obtaining the recovery phrases displayed when users set up their wallets. Such devices are said to still pass Ledger's official authenticity checks because the original secure element remains intact, and the verification process cannot detect unauthorized physical modifications. A growing speculation suggests that attackers collect mnemonic phrases from affected devices and wait to simultaneously transfer funds from multiple wallets. Karpelès' warning reportedly garnered approximately 90,000 views, potentially alerting attackers that their operation had been exposed and prompting them to move stolen funds. Karpelès stated that one affected Ledger device he examined came from Malaysia, packaged with intact shrink wrap, and had an implant hidden beneath the screen. The suspected attack vector is believed to be a hardware supply chain compromise rather than a cryptographic algorithm vulnerability. The connection between Karpelès' warning and the subsequent wallet fund transfers has not been confirmed, nor has it been verified whether the same batch of implanted devices caused the transfers. If confirmed, the incident would demonstrate that even devices certified by manufacturers can compromise users' self-custody security due to hardware infiltration.