Mark Karpelès finds suspicious SIM-enabled module in Ledger wallet

Oct 9, 2026 18:59 (8h ago)

Mark Karpelès found a suspicious SIM-enabled module inside a Ledger hardware wallet.
The concealed module was discovered beneath screen padding despite intact outer packaging.
23pds said the suspected attack mechanism remains unverified and technically speculative.

Former Mt. Gox CEO Mark Karpelès found a suspicious module containing a SIM card chip inside a Ledger hardware wallet he purchased in Malaysia. The module was concealed beneath the screen padding, and the device’s outer packaging was intact. SlowMist Chief Information Security Officer 23pds said an attacker might connect the module to the screen data cable to record recovery words displayed during device setup and transmit them externally through LTE or eSIM. The analysis remains a technical hypothesis awaiting verification. The earlier account allegedly linked the device to reseller CryptoBilis.