A cellular modem inside a Nano X. 📡
Ledger confirmed one affected device out of Malaysia had a little board hidden in the case, tapped into the line that carries the 24 words from the secure chip to the screen at setup, with its own eSIM to get them out. None of it tripped Ledger's genuine check, because the check only asks the chip to prove itself, and the chip was real. It guarded the seed flawlessly right up to the one moment it's built to say it out loud. Whoever designed this never touched the cryptography. They sat on a wire I'd never once thought about, between a chip I trusted and a screen I trusted.
Thursday night I was spooked about AI coming for our signatures. Friday the signatures turned out to be perfect. Every transfer that pushed the losses past $86 million and toward $90 million carried a valid signature, which is all Bitcoin, Ethereum or Tron ever ask for. What I keep chewing on is the patience. If the words leaked at setup, nothing had to happen at setup. The thief holding the other copy waits while you, finally feeling safe, move the real stack across. The more careful you felt, the more there was to take.
I remember the fake Nanos mailed out after Ledger's customer list leaked, a USB stick soldered on like a tumor, obvious the second you cracked the case. This one looked clean, sat in an authorized reseller's stock and phoned home on its own, which takes a board design, eSIMs, data plans and access somewhere between the factory and the shelf. My mind went to Pyongyang first, which says more about my month than the evidence. CryptoBilis has pulled every hardware wallet it sells, not just the Ledgers, and I can't tell yet whether that's caution or a hint the problem isn't Ledger-shaped.
I've said "buy direct or from an authorized reseller" so often it stopped sounding like advice, and only now do I notice that "authorized" describes a business relationship, not a chain of custody. Ledger's guidance, if you bought from CryptoBilis in the last 90 days, is to skip setup entirely, so the safest place for that cold wallet is its box. We spent weeks screaming about whether Ledger Recover let firmware carry the words off the chip, when the exit that mattered was always the screen, the one door every device has to open for your own eyes.
As far as I can tell, the only slice of the loot that got stopped was whatever USDT Tether managed to freeze, and the bitcoin and ether look gone. I don't love where that leaves me, the most centralized dollar in crypto playing backstop to a self-custody theft, after years of keeping them at opposite ends of my map. Blumenthal is pulling on the Cantor thread, Lutnick's old shop and keeper of Tether's Treasuries, with Democratic Senate odds climbing and the midterms weeks away, and it reads like a draft of next year's subpoena list. I don't think the freeze was theater. I just notice whose week it made easier.
There's a rates story under the Cantor story. The September minutes show most of the Fed unconvinced that inflation slides back to 2% without another increase, and the oil curve looks to me like it's pricing the Middle East supply shock as a squall that blows through. 🛢️ If the curve is too relaxed, the other freeze, the Fed's, drifts further out, and every extra month of expensive money is a gift to Tether's bill pile at Cantor and a tax on bitcoin's appetite. I can't tell which of those matters more for us, and I've stopped pretending the chart knows.
Expensive money was the backdrop when AT&T, Verizon and T-Mobile had their worst sessions in more than a decade, over the idea that SpaceX can sell connectivity from orbit. 🛰️ These are the names the funds hold for the dividend, and for a day their moat, towers and spectrum and decades of poured concrete, got priced like it might be shallow. It's the look the big banks give stablecoins, sitting on all those branches while something routes over their heads. Their tokenized versions ride the same rails as my stablecoins now, and watching them bleed in the window next to my Tron flows, I stopped thinking of them as a separate market.
I've held a grudge against those companies since the SIM-swap years, when a swap emptied a friend's exchange account in an afternoon and Michael Terpin took AT&T to court over his. The SIM keeps turning up at crime scenes in this industry, and this week it turned up inside a hardware wallet, the same days the carriers got repriced for a world with fewer gaps in coverage. Cold storage was always a bet that a little box could be a dead zone. Offline is turning into a place you can't get to anymore.
The CFTC spent the same days fighting over a different kind of swap. 🎲 It wants sports, politics, culture and weather contracts defined as swaps, with an interim rule carving casino-style games out as gambling, all aimed at exclusive jurisdiction while the states fight Kalshi in court. I watched Gensler's SEC stretch "security" for years until the word covered whatever the agency wanted to touch. Same maneuver, different noun, and my feed only cheers this time because it points Kalshi's way. Now the CFTC wants to end a state-by-state courtroom war with a dictionary, and my Sunday football bet is apparently a cousin of an interest rate swap.
Then the other ledger. The XRP Ledger rushed out an emergency release once a research demo proved a payment could create spendable XRP the sender never funded, a decade-old bug on a chain whose supply was fixed at genesis and only ever meant to shrink. It took me back to Bitcoin's overflow from the pennies era, a mountain of coins conjured and rewound, and the inflation bug Core caught in time during the ICO hangover. The patch is the comforting half. The other half is proving the past was clean, and I'm not sure how I'd do that here. I don't know whether a model helped find this bug. I'd bet the next decade-old one gets found with AI, and not always by a researcher who calls it in.
If there's a thread, I think it's that the cryptography held. The chip stayed sealed, every signature verified, and everything that mattered happened at the seams: a wire, a shelf, a payment path unnoticed for a decade, a freeze key, a senator, a dictionary. I'm finally building the multisig I've put off for years, keys from different makers bought through different hands, because spreading the trust thin is the only answer I have. I keep picturing that board in the photo with a SIM of its own. Somewhere a carrier bills that line every month, and whoever owns it pays on time.