Ledger Launches $849 Atom Wallet Days After $86M Hack

Ledger Unveils the $849 Atom

Ledger picked a battered week to widen its product range. The Paris-based hardware wallet maker unveiled a new device, the Atom, priced at $849, on Thursday, just days after confirming that spyware implanted in units sold through an official reseller had drained more than $86 million from customers. The announcement posts went up on X the same day the company published its most detailed account yet of the breach, and the response was immediate. Early replies called the timing the “worst timing ever” for a product launch, while others suggested the unveiling should have been delayed until the security investigation ran its course. One widely shared reply went further, arguing that whoever approved a product announcement inside the same window as the breach disclosures should lose the job.

The device itself moves the company into unfamiliar territory. Ledger describes the Atom as a security-focused Android device that looks like a phone but cannot place calls or send texts, and the company is explicit that it is “not designed to replace your phone.” It runs Android OS alongside Ledger-OS, a separate system built to handle “transactions, logins, and sensitive data.” A physical “privacy switch” is said to cut the camera and microphone at the circuit level, a claim aimed at users who keep high-value keys on the device. The hardware is also reported to ship with a data-only eSIM, which means messaging and internet-based calls stay possible through downloaded apps even without a voice plan.

The design raises a practical question on top of the reputational one. Earlier Ledger devices were small enough to sit in a pocket without much thought. The Atom asks buyers to carry what is effectively a second phone, at $849, in a week when the company's reseller network is under active scrutiny.

@federico_rivi · X post

Called.

View on X

Inside the $86M Reseller Attack

The breach shadows the launch at every step. The drained funds trace to CryptoBilis, an official Malaysian reseller whose stock was found to carry implanted spyware. Customers who received the tampered crypto wallet units lost more than $86 million in total last week, with the malware engineered to harvest the recovery phrases that control the accounts. In the forensic update published Thursday, Ledger said a “highly organized criminal group” spent “millions” installing the implants, and that the attackers “built their own logistics and technology infrastructure with seeds collector servers, draining and laundering infrastructures.” Read plainly, the operation ran like a business: servers built to collect seed phrases as victims initialized their devices, draining systems to empty the compromised accounts, and laundering infrastructure to move the proceeds out.

Ledger's containment effort has moved in stages. Earlier this week the company asked 23 official resellers across South Asia to suspend sales after tampered devices surfaced in the channel, a suspension that remains in place. On Wednesday, it reported that devices supplied by MediaMrkt, its official German reseller, showed no sign of tampering, and that no loss of funds related to implants has been reported anywhere in Europe. That clearance concentrates the confirmed damage in the Asian reseller chain, though the company has not disclosed how many affected units shipped worldwide or whether every tampered device has been pulled from circulation. The suspension of nearly two dozen retail points is itself a supply-chain event: it halts new hardware through much of the region while the forensic work continues. The company has also not said whether customers who initialized devices through other channels face residual risk, a gap that keeps the story open for buyers outside Malaysia.

The sequence matters for how the Atom will be judged. This week's record shows the failure sat not in a hot wallet exposed online but inside sealed boxes distributed through an authorized partner, the exact threat a premium cold wallet is marketed to exclude. The $849 price now has to clear a trust bar alongside the feature bar, since buyers are being asked to pre-order from a company whose approved channel was just turned against its customers. The South Asian suspensions stand, and the forensic account of the criminal group's infrastructure, published today, is Ledger's most recent word on the breach.