Ledger is reviewing its device sales policies after a spyware-related theft cost the company $90 million. The hardware wallet maker confirmed the review this week, following an incident that exposed gaps in how its products move from production to customers' hands.
The theft involved spyware, according to a report from Crypto Briefing. It's a costly reminder that even security-first companies can get hit when the supply chain becomes the weak link.
How spyware turned a supply chain into a $90M problem
Spyware doesn't need to crack a device's firmware to cause damage. It can sit in the sales or distribution layer, intercepting data, compromising order information, or hijacking the delivery process. Ledger's $90 million loss suggests the intrusion wasn't a one-off phishing email. It ran through channels the company relies on to get devices to users.
The review now underway is focused on device sales policies — not the wallet software itself. That distinction matters. Ledger's core pitch has always been that private keys never leave the hardware. But if the sales pipeline is compromised, the trust chain breaks before the device even powers on.
Why the timing isn't great for hardware wallets
Hardware wallet makers have spent years arguing that self-custody beats exchange custody. That argument hinges on the device being clean from factory to doorstep. A $90 million spyware theft gives critics an easy counterpoint: the box might be sealed, but the path it traveled wasn't.
Ledger hasn't said which specific sales policies are being changed or how long the review will take. The company also hasn't disclosed whether the spyware was planted internally, introduced by a third-party vendor, or injected during shipping. Those unanswered questions are likely to shape how customers view future orders.
What the review actually covers
The scope is device sales policies — the rules and checks that govern how Ledger devices are sold, shipped, and verified. That could include vendor vetting, tamper-evident packaging, order verification steps, and post-sale monitoring.
It's not a firmware audit. It's not a response to a wallet exploit. The loss came through the sales channel, and that's where the changes will land. For a company that sells physical security, the sales policy is part of the security model, whether it's marketed that way or not.
The supply chain question every hardware maker faces
Supply chain security is a shared problem in the hardware wallet space. Devices pass through manufacturers, assemblers, distributors, and couriers before reaching a customer. Each handoff is a chance for spyware, tampering, or data interception.
Ledger's incident puts a number on that risk: $90 million. The company is now reviewing the policies that govern those handoffs. The outcome will likely influence how other hardware wallet makers approach vendor contracts and shipping audits, even if they don't say so publicly.
For now, Ledger users are left with a practical question: does the review change anything about devices already sold, or only future orders? The company hasn't said. That's the next detail to watch.
