Ledger CEO and Ex-Mt. Gox Boss Clash Over $90M Wallet Feud

A Dramatic Public Feud Over Crypto Security

Imagine buying a high-tech digital lock to keep your life savings safe, only to discover someone slipped a hidden listening device inside before it ever reached your front door.

That exact nightmare scenario is at the heart of an intense public argument between two prominent figures in the crypto world: Ledger Chief Executive Officer Pascal Gauthier and former Mt. Gox head Mark Karpelès.

The conflict centers on sophisticated physical spy implants found inside Ledger cold storage devices. Karpelès claims that clearer, earlier warnings from Ledger could have protected crypto investors from losing more than $90 million to hackers. Ledger, however, strongly defended its actions, triggering a sharp personal exchange between the two executives.

How Hidden Hardware Implants Steal Crypto Funds

To understand why this dispute has created such a stir, it helps to look at how physical supply-chain attacks work.

When you set up a hardware wallet, the device generates a secret 24-word recovery phrase. This seed phrase acts as the master key to your digital assets. Anyone who gains access to these 24 words can control and transfer your funds from anywhere on Earth.

In this attack scenario, bad actors intercepted legitimate hardware wallets somewhere during distribution. They carefully opened the plastic casing and soldered a tiny, custom circuit board onto the device's internal board.

When an unsuspecting user sets up their new wallet, the hidden chip quietly copies the generated 24-word seed phrase. The modified hardware then secretly transmits those secret words back to criminals, who can drain the funds remotely.

The Timeline Dispute: What Did Ledger Know and When?

Mark Karpelès helped highlight the threat after opening a sealed Ledger wallet and discovering the added circuit board. He argues that Ledger was aware of these advanced hardware implants as early as March.

Karpelès pointed to a security guide published on March 6 that displayed images of both handmade and mass-produced spy chips. He asserted that stronger, more direct public warnings at that time could have prevented tens of millions in user losses.

However, the timeline contains some ambiguity. The security article was updated in September, leaving questions open about when those specific images were first added.

Correction: I said @Ledger didn't talk about the implant situation at all despite knowing about it – they did publish an academy topic in March 2026 that talks about it and recommends buying direct or from Authorized Resellers. — Mark Karpelès

Although Karpelès clarified his initial statement after recognizing Ledger's March educational article, he continues to argue that the company should have sounded a clearer alarm.

The Software Blind Spot: Why 'Genuine Check' Missed the Threat

One of the most troubling details to emerge is a limitation in Ledger's built-in software verification tool, known as Genuine Check.

When a user connects a device, Genuine Check communicates with the official secure element chip inside the wallet to verify that the hardware is authentic and unaltered.

Ledger acknowledged that Genuine Check cannot detect physical implants if the original secure chip remains intact. Because attackers piggybacked their spy chip alongside the genuine chip rather than replacing it, the software check passed without warning the user.

Personal Attacks and the Mt. Gox History

As the argument played out publicly, Ledger CEO Pascal Gauthier defended his firm's actions and urged Karpelès to stick strictly to the facts. The debate soon took a personal turn.

Coming from the Mt Gox CEO… Come on man, you are no white knight. Get real. — Pascal Gauthier

Gauthier was referring to the catastrophic 2014 collapse of the Mt. Gox BitcoinBTC+0.11% exchange. Under Karpelès's leadership, Mt. Gox lost approximately 850,000 Bitcoins following years of unnoticed security breaches.

Karpelès responded that experiencing such a devastating event firsthand is precisely why he pushes for high security standards across the industry today.

Industry-Wide Responses to Supply Chain Threats

The ongoing controversy has already prompted changes in how hardware wallet manufacturers manage their distribution channels:

• Reseller sales halted: Ledger suspended sales through third-party reseller CryptoBilis as concerns over supply chain security grew.
• European concerns spread: Reports of tampered hardware devices surfaced across Europe, raising broader questions about third-party delivery routes.
• Competitor actions: Rival hardware maker Trezor announced plans to scale back its third-party reseller network to limit exposure to supply chain tampering.

What This Means for Self-Custody Security

For crypto holders using cold storage devices, this dispute highlights an important point about hardware security.

Even a genuine hardware wallet cannot fully protect funds if the physical device was intercepted and altered before reaching the user. Security specialists generally advise the following steps to lower supply chain risks:

• Purchase directly from manufacturers: Order hardware wallets directly from the official creator rather than third-party merchants or open online marketplaces.
• Inspect packaging carefully: Thoroughly examine the box, outer shrink-wrap, and physical casing for any signs of tampering, glue residue, or unexpected seams.
• Use optional passphrases: Enabling an extra passphrase (sometimes called a 25th word) adds secondary protection even if a 24-word seed phrase is compromised.
• Follow official security updates: Check primary manufacturer channels regularly for security advisories regarding distribution safety.