Unauthorized Hardware Found in Ledger Stax Wallet, Posing Phrase Risk

A Ledger Stax hardware wallet has been found with unauthorized components that could transmit users’ wallet recovery phrases to attackers.

The suspected modification includes a Nordic nRF9151 4G/LTE cellular modem, a component absent from genuine Ledger hardware. Additional unauthorized parts were installed beside the modem.

Wiring crosses the battery and connects to an antenna concealed beneath the device’s back cover. That configuration could allow recovery-phrase data to be sent over a cellular connection.

The discovery was recorded Sunday, Oct. 11, at 4:24 p.m. ET (20:24 UTC). It marks the first identified Ledger Stax device described as containing an unauthorized hardware implant.