# Researcher Says Second Ledger Wallet May Be Linked to Aqipa-Supplied Inventory

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/30988
Published: 2026-10-13T09:48:11.000Z
Updated: 2026-10-13T09:48:11.000Z
Section: Technology

> Johannes said the device contained modifications matching an earlier wallet, including additional cables and an LTE module. Ledger has not publicly confirmed the finding or determined whether other units are affected.

Johannes said a Ledger hardware wallet bought at a second MediaMarkt location in Europe contained modifications matching those found in an earlier device, raising questions about whether more units may be affected.

The purchase took place Oct. 12. Johannes said he found additional cables and an LTE module in the wallet, then sent the device to Ledger for analysis. No Ledger analysis of the second device has been publicly identified.

Store records shown by Johannes listed Aqipa GmbH as the inventory source. The records do not establish that Aqipa supplied the specific wallet directly to MediaMarkt, or that the distributor was involved in modifying it.

“I can confirm that the Ledger supply chain is compromised in Europe as well,” Johannes said. He also said the records showed that “the inventory originated from Aqipa GmbH.”

Aqipa began distributing Ledger products in Germany and Austria in 2023. MediaMarkt is listed as an authorized Ledger reseller in both countries. Those relationships establish a distribution connection but do not confirm that the examined unit passed through Aqipa or that other European inventory was affected.

The allegation conflicts with Ledger’s latest public position on the Oct. 9 draining incident. All confirmed cases tied to that incident involved devices sold through Southeast Asian reseller CryptoBilis, while Ledger’s internal systems and direct sales channels were not affected.

An unauthorized hardware implant was confirmed in one affected user’s device. Losses linked to the CryptoBilis incident have been estimated at $86 million to $93 million across more than 300 wallets, but Ledger has not confirmed that estimate.

The scope of any potential European issue remains unestablished. No confirmed loss figure or broader count of affected European devices has been identified. TokenPost previously covered [Johannes’ earlier warning about suspected Ledger supply-chain tampering](<https://www.tokenpost.com/news/technology/30393>).



## Links in this article

- [Johannes’ earlier warning about suspected Ledger supply-chain tampering](https://www.tokenpost.com/news/technology/30393)
