"No indication Ledger's systems were compromised." Technically true. But someone still opened Ledger devices, planted a spy chip, resealed the box, and sold them through a reseller Ledger worked with. The chip sat on the screen's data lines and copied the 24 words during setup. The secure element can't protect a seed phrase that gets read straight off the display. And the packaging looked untouched. So the real questions: Who was checking this reseller? Why could a tampered device pass as new? Why are anti tampering solutions only coming now, after an estimated $86M is gone? The tech wasn't broken. The supply chain was. And for users, that's the same thing.