Security researchers have discovered that Chinese e-commerce platforms are selling counterfeit Ledger hardware wallets.

CoinFeed reported on April 17th, citing Cointelegraph, that a Brazilian security researcher warned that a Ledger Nano S Plus device purchased from a Chinese e-commerce platform was a sophisticated counterfeit designed to steal users' crypto assets. The device was priced the same as the official store, and the packaging and product page appeared legitimate, but it failed the "authentication verification" after connecting to the official Ledger Live app. Disassembly revealed that the device's hardware and firmware had been tampered with, including embedded WiFi and Bluetooth antennas, and the chip markings had been scratched off. Firmware analysis showed that the device, upon startup, displayed the manufacturer as Shanghai-listed company Espressif Systems. The researcher advised users to only download LedgerLive from ledger.com, only purchase hardware from ledger.com, and to immediately stop using the device if it fails the authenticity verification.