According to Cointelegraph, a user purchased what appeared to be a genuine Ledger hardware wallet from a major retailer in the European Union. The device later exhibited behavior inconsistent with standard Ledger functionality, prompting further investigation.
Security researchers employed artificial intelligence tools to analyze the device’s firmware and interactions. Their analysis revealed a vulnerability related to the XRP cryptocurrency protocol that could affect ledger validation processes. Researchers referred to this finding as a bug tied to an amount described in their report as “18 trillion XRP.”
The team shared details of their discovery publicly and submitted a formal report through Ledger’s official disclosure channel. In response, Ledger acknowledged receipt of the report and began its internal review process. Despite the technical significance identified by researchers, the maximum bounty available for reporting such issues at the time was $250,000. Researchers accepted a payout of $250,000, which represents the full amount offered under Ledger’s current bug-reward policy.
The incident follows earlier reports of tampered or counterfeit Ledger devices appearing in retail channels. While Ledger has not publicly confirmed widespread distribution of compromised units, it continues to advise users to verify device authenticity through official sources and avoid purchasing from unofficial sellers.
