Singapore
Security incidents tagged Singapore. Newest first.
1 Singapore incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 0
- Days without an incident
- 0
- Longest quiet run: 14 days (Oct 14–Oct 27)
- HighPartly patched
Hidden LTE implants in Ledger wallets sold by reseller CryptoBilis stole recovery phrases
Ledger devices sold through CryptoBilis, a reseller listed as authorized in Indonesia, Malaysia and the Philippines, contained hidden hardware implants that captured users' 24-word recovery phrases, Ledger said in October 2026. Its Donjon security team found the implant sits inside the enclosure, reads the phrase off the screen during setup and sends it out over LTE using an embedded eSIM. It does not modify the Secure Element, the Ledger OS, transactions or signatures, so tampered devices may still pass authenticity checks. Wallets were drained on Oct 9; Ledger has not confirmed total losses, while on-chain investigator Specter traced more than $86 million in suspected thefts. Ledger calls it a physical supply-chain attack, not a breach of its software or systems, and says its direct sales channels are unaffected. On Oct 28 the Singapore Police Force said at least two cases since Sept 10 involved tampered Ledger wallets bought from some retail stores in Singapore, with about S$3.5 million (US$2.7 million) lost.
Ledger hardware wallets (signers) sold by reseller CryptoBilisSince Oct 9, 2026
