Darkfost Expands Ledger Reseller Risk List After Singapore Finding

Darkfost said a Ledger Flex sold through a Metapod vending machine at Singapore’s Changi Airport contained a malicious hardware implant, prompting it to expand a potential-risk list covering Ledger resellers in Asia and Europe.

Darkfost also flagged a separate device sold through Germany’s MediaMarkt retail channel, saying it appeared to contain a similar implant. Another device believed to have been supplied by distributor Aqipa is still awaiting testing.

Former Mt. Gox CEO Mark Karpelès publicly disassembled a device and documented the test results. Darkfost added several official resellers to the watchlist but did not confirm that the broader supply chain had been compromised.