Ledger admits that the chip recognized 24 mnemonic words on the screen MediaMarkt, one of the largest consumer electronics chains in Europe, has removed all Ledger products from its shelves today. The product line that was taken down is not a specific batch number, but the entire product line, because after the two Nano X units sold in German stores were disassembled, they both had cables and a suspected LTE module inside. A few days ago, this incident was mistaken for an accident involving a distributor in Southeast Asia. Ledger confirmed that all the devices that were tampered with were from CryptoBilis, an authorized distributor in Southeast Asia, in Malaysia, Indonesia, and the Philippines. The official statement only verified the presence of unauthorized implants in one machine. So Ledger explained his techniques today. The extra chip is hidden inside the device casing. At the moment when the user initializes for the first time and 24 recovery phrases are displayed on the screen, the microcontroller inside the chip recognizes and decodes these words, and then sends them out through an eSIM over LTE mobile network. 24 words are the total key to the wallet. Whoever gets it will rebuild the wallet on another computer, and the coins will be moved away. Your machine doesn't even need to be connected. Ledger also specifically said that the security chip, system, and signature were not moved, but the goods were opened and stuffed with something on the way. But German goods are not from Southeast Asia at all. @0xJohannes_ is a German user who bought a Nano X from a MediaMarkt store. Upon opening it, he discovered that there were additional cables and a suspected LTE module inside. I didn't believe it myself, so on October 12th, I went to another MediaMarkt store to buy a second one and recorded a video of the entire unboxing process. I flipped through that video and saw that the picture quality was extremely blurry. He came out of the store with a brand new machine and pried it open on the spot, revealing the extra wires. Two machines, two stores, all in one. He named the middle ring as dealer Aqipa, and Ledger's CTO himself couldn't say whether Aqipa was considered a direct dealer. That is to say, dirty goods are not only in the warehouse of one distributor. A Ledger Flex was sold at the Metapod store at Changi Airport in Singapore. The buyer, Ben Yorke, noticed scratches on the exterior and sent it for inspection. However, former CEO Mark Karpel è s opened it and found an extra circuit board inside, which he had never used before. Part of the Nano X received from Amazon Japan and Yahoo Auctions in Japan has also been implanted. On October 11th, the first report of Stax implantation was released, which included 4G/LTE modules and hidden antennas. The goods from two German stores were found to be the same, so MediaMarkt's parent company decided to take down all the Ledgers. No one can guarantee that the plastic sealed cold wallet in a legitimate electrical appliance chain is original now.