Karpeles post may have triggered the Ledger wallet drain

Mark Karpeles, former Mt. Gox CEO, flagged tampered Ledger devices on October 8 that carried hidden SIM cards and spyware beneath the screen. The malware quietly captured recovery phrases during wallet setup.

These units still passed Ledger’s official authenticity check because only extra hardware was added, leaving the secure chip untouched. One batch arrived from Malaysia in pristine packaging.

Investigators now suspect the attackers had been harvesting seeds for months and rushed to empty the wallets after Karpeles’s warning reached roughly 90,000 views. A direct link remains unproven.

Based on information from cryptonews.net