US Judge Refuses to Undo Gemini’s $5 Million CFTC Settlement
A federal judge has rejected a joint attempt by cryptocurrency exchange Gemini and the US Commodity Futures Trading Commission to overturn their $5 million settlement concerning statements made during the regulatory review of a proposed Bitcoin futures contract. The decision leaves the January 2025 consent order in place despite the CFTC’s subsequent change in digital-asset enforcement policy. It also demonstrates that a regulator’s revised priorities do not automatically erase a settlement already approved by a court. Key Takeaways Why the CFTC Sued Gemini The CFTC filed its lawsuit in 2022 over statements Gemini provided between July and December 2017. The information was submitted while regulators considered a proposed futures contract whose settlement price would be determined using a Gemini Bitcoin auction. According to the CFTC’s account of the 2025 order, the disputed information concerned matters including prefunding, self-trade prevention, fee rebates, trading volume and liquidity. These details were material because regulators needed to assess whether the proposed contract could be susceptible to manipulation. A futures contract allows participants to gain exposure to an asset’s future price without necessarily owning that asset directly. Traders unfamiliar with these instruments can review how crypto derivatives work and the additional risks associated with leverage, liquidity and counterparties. Why Both Parties Wanted the Order Vacated Gemini and the CFTC settled shortly before the case was scheduled for trial. The consent order imposed a $5 million civil monetary penalty and a permanent injunction covering false or misleading representations to the regulator. In May 2026, however, the two parties jointly asked the court to vacate that order. They argued that changes in federal digital-asset policy and the CFTC’s current enforcement standards meant the case would not have been brought in the same form under the agency’s newer approach. Gemini reportedly agreed that it would not seek repayment of the penalty if the settlement were erased. Why the Judge Rejected the Request US District Judge Alvin Hellerstein concluded that the parties had not satisfied the legal requirements for setting aside the settlement. As Reuters reported, the judge noted that Gemini had litigated the case for more than three years before voluntarily agreeing to resolve it. The CFTC’s present view of the enforcement action was therefore not, by itself, sufficient to undo the consent order. Importantly, the ruling addresses whether the completed settlement should be vacated. It should not be interpreted as a new trial or a fresh factual judgment on every allegation in the original lawsuit. Why This Matters for Crypto Exchanges Cryptocurrency exchanges provide the infrastructure through which users buy and sell digital assets, but they may also supply pricing, auction and liquidity data used by regulated financial products. Readers learning how cryptocurrency exchanges operate should recognise that regulatory scrutiny can extend beyond customer deposits and withdrawals. It may also cover market data, surveillance controls, trade execution and statements made to authorities. Accurate liquidity and volume information is especially important in markets vulnerable to misleading activity. Practices such as wash trading can create artificial volume, potentially distorting how traders and regulators evaluate a market. The case consequently highlights the importance of documented controls and verifiable regulatory submissions, regardless of how government enforcement priorities evolve. Conclusion The court’s decision keeps Gemini’s $5 million CFTC settlement and related injunction intact. Its broader significance is procedural: settlements approved by courts carry lasting legal weight. A regulator and defendant may later agree that enforcement policy has changed, but that agreement does not necessarily provide sufficient grounds to rewrite a completed judicial outcome.
US Businesses Remain Cautious About Stablecoin Payments, Fed Survey Finds
Stablecoins are receiving growing attention from banks, payment companies and policymakers, but adoption among ordinary US businesses remains limited. Research from the Federal Reserve Bank of Cleveland found that only one of 148 surveyed firms was already using stablecoins. Seven others planned to use them in the future, while the remaining respondents had no plans, were unfamiliar with stablecoins or were uncertain about their companies’ intentions. The results indicate that regulatory progress and technical capability alone may not be enough to move businesses away from established payment methods. Key Takeaways What the Survey Found The Cleveland Fed’s research was based on responses collected from September 18 to 25, 2025. Participants operated in the Federal Reserve’s Fourth District, covering Ohio, western Pennsylvania, eastern Kentucky and part of West Virginia. Among the seven businesses planning to use stablecoins, one expected to begin within six months, two within a year and one within two years. The remaining three did not know when adoption would happen. The eight current or prospective users showed interest in accepting customer payments, paying suppliers and managing treasury funds. However, this group represented a small fraction of the overall sample. Why Businesses Are Hesitating When asked what might influence their interest, respondents frequently identified customer demand, additional time to observe adoption and clearer evidence of cost or efficiency advantages. Several businesses said their existing payment options already met their needs. Others raised concerns about regulation, operational complexity and the amount of education their staff would require. These responses suggest that knowing what stablecoins are and how they work is only the beginning. A business must also understand accounting treatment, custody arrangements, redemption processes and how a stablecoin payment will connect with its existing financial systems. A lack of requests from customers and suppliers creates another obstacle. Even an efficient payment method has limited value if a company’s counterparties are not prepared to use it. Infrastructure Does Not Guarantee Adoption Stablecoins can support transfers outside traditional banking hours and may offer advantages for certain cross-border transactions. However, those benefits vary depending on the provider, blockchain, conversion process and destination. Businesses must compare the complete transaction rather than focusing only on the blockchain transfer. A payment could still involve wallet fees, currency conversion, compliance checks and movement between digital assets and bank accounts. Understanding how cryptocurrency payments work can help companies identify these additional steps. Businesses accepting customer payments must also assess the role of payment gateways in cryptocurrency transactions, including how they handle conversion, settlement and transaction monitoring. The Findings Have Important Limits The Cleveland Fed cautioned that its sample was small and geographically concentrated. The results should not be interpreted as proof that US businesses everywhere reject stablecoins. The survey also measured sentiment at a specific point in September 2025. Adoption may change as regulations become clearer, more financial institutions provide stablecoin services and businesses gain direct experience with the technology. Nevertheless, Payments Dive’s coverage shows why the findings matter: enthusiasm within the digital-asset industry does not automatically translate into demand from mainstream companies. Conclusion The Cleveland Fed survey reveals a significant gap between stablecoin development and everyday business adoption. For stablecoins to become a common payment method, providers will need to offer more than faster technology. Businesses will require clear economic benefits, dependable regulation, straightforward integration and sufficient demand from the customers and suppliers with whom they transact. Until those conditions develop more broadly, stablecoins may remain most useful in specialised payment and treasury situations rather than as a universal replacement for existing business-payment methods.
Bank of England Signals No Rush to Launch a Digital Pound
The Bank of England has indicated that the United Kingdom may not need to introduce a retail digital pound as quickly as previously anticipated, particularly if regulated private-sector alternatives can deliver similar benefits. Speaking during meetings in Washington, Deputy Governor Sarah Breeden reportedly said tokenised bank deposits and sterling-denominated stablecoins could provide households and businesses with new ways to make digital payments. Her comments do not mean the digital pound has been cancelled. Instead, they suggest that UK policymakers are evaluating how different forms of digital money could coexist before committing to a central bank digital currency. Key Takeaways Private Digital Money Could Reduce the Urgency According to PaymentExpert, Breeden said the UK might not need a digital pound “that quickly” if private digital money develops successfully. These private alternatives could include regulated pound-denominated stablecoins and tokenised commercial-bank deposits. Although they may use similar technologies, they are not the same as a central bank digital currency. A digital pound would be issued by the Bank of England and represent a direct claim on the central bank. Stablecoins are normally issued by private companies, while tokenised deposits remain liabilities of commercial banks. Understanding what stablecoins are and how they work is therefore important when comparing them with a potential digital pound. The Digital Pound Has Not Been Approved The Bank of England and HM Treasury are still assessing whether a digital pound is necessary. The Bank’s official digital pound updates state that no decision has been made. A blueprint and joint assessment are expected in 2026, after the current design phase concludes. Even if officials decide to proceed, Parliament would need to approve primary legislation before a digital pound could be introduced. Consumers should therefore not interpret the latest remarks as an announcement of an upcoming launch. Building a Multi-Money System Breeden’s broader objective is a financial system in which cash, traditional bank deposits, tokenised deposits, regulated stablecoins and potentially central bank digital currency can operate together. For users, the crucial requirement is that these different forms of sterling remain interchangeable at par. One pound held in a bank account, stablecoin wallet or future digital-pound wallet should retain the same face value when transferred between systems. Achieving that outcome would require strong regulation, reliable reserves, redemption rights and compatible payment infrastructure. These safeguards are especially important because crypto payments involve several technical and operational stages that may not be visible to the customer. The Bank also wants credible sterling-based options to develop so that the UK’s digital-payment market does not become overly dependent on tokens denominated in other currencies. What Happens Next? The Bank of England is expected to continue developing its digital-pound blueprint while finalising its approach to systemic stablecoins. Policymakers will need to determine whether private innovation can provide secure, accessible and widely accepted digital money without creating unacceptable risks. They must also consider privacy, financial inclusion, resilience and the potential effect on commercial-bank deposits. Central bank digital currencies remain one possible part of cryptocurrency’s wider influence on the future of finance, but the UK’s approach shows that governments do not necessarily view them as the only solution. Conclusion The Bank of England has not abandoned the digital pound, but it appears increasingly willing to let regulated private money prove what it can deliver. The final decision will depend on whether stablecoins and tokenised deposits can provide efficient digital payments while maintaining public confidence in sterling. Until the Bank of England and HM Treasury complete their assessment, the digital pound should be viewed as a policy option—not a confirmed product.
Canada-to-Asia Crypto Remittances Rise 141% to $2.36 Billion
Remittance-sized cryptocurrency transfers from Canada to India, China and the Philippines reached $2.36 billion during the 12 months ending June 2026, according to new blockchain research. The total represents a 141% increase from the previous reporting period. Chainalysis also identified approximately 3.56 million transfers across the three corridors, with an average value of $663. The findings suggest that stablecoins and other digital assets are becoming more relevant to cross-border transfers. However, the observed blockchain flows should not be treated as a complete record of household remittances between Canada and the three destination countries. Key Takeaways Stablecoins Gain Share in Cross-Border Transfers Chainalysis published the findings on 14 October in its 2026 North America crypto-adoption report. The research describes Canada as the strongest peer-to-peer crypto economy among G7 countries. It points to the country’s large immigrant population and frequently used transfer corridors as possible contributors to that activity. Stablecoins can be useful in cross-border payments because their values are designed to track reference currencies. A sender may convert Canadian dollars into a stablecoin, transfer the tokens and allow the recipient to hold them or convert them into local currency. UPay’s explanation of how crypto payments work outlines the roles of wallets, blockchain networks and conversion services in this process. The route can involve several separate transactions. Funds may move from a bank to a platform, from fiat currency into a stablecoin, across a blockchain and finally into the recipient’s preferred currency or account. What the $2.36 Billion Measures The reported figure comes from blockchain activity identified as Canada-originating, remittance-sized transfers involving India, China and the Philippines. It does not establish that every transfer was sent by an immigrant to a relative. Transactions of a similar size can also represent business payments, movement between accounts controlled by the same person or other forms of peer-to-peer activity. Blockchain analysis can identify transaction values, wallet relationships and interactions with known services. It may not reveal the private purpose behind every transfer or the relationship between sender and recipient. The figure should therefore be described as measured crypto activity across likely remittance corridors, rather than an official total for personal remittances. The Philippines Corridor Reached $61 Million Additional data reported by Cointelegraph placed Canada-to-Philippines crypto remittances at approximately $61.02 million across 73,564 transactions. The value increased 28%, while the number of transfers rose 34.7%. Faster growth in transaction count than value suggests that the average transfer did not rise at the same rate. The Philippines is one of the world’s largest remittance-receiving markets, and digital assets are already used for part of its inbound flows. Nevertheless, the reported $61 million should not be interpreted as the country’s total remittance market or its complete inflow from Canada. Network Fees Are Only One Part of the Cost Lower blockchain fees are often presented as evidence that crypto remittances are cheaper than traditional services. A proper comparison must include the complete path from sender to recipient. Possible costs include: The recipient may also face restrictions or additional verification requirements before converting or withdrawing the funds. UPay’s guide to the role of cryptocurrency payment gateways explains how service providers connect blockchain transfers with fiat-payment systems. These intermediaries can simplify the process, but their fees and conversion rates remain part of the transaction’s total cost. Stable Value Does Not Remove Every Risk Stablecoins can reduce exposure to the price movements associated with assets such as Bitcoin, but they introduce other considerations. Users still need to examine the issuer, reserve arrangements, redemption conditions and availability of the token in both countries. They must also select the correct blockchain network and use compatible wallet addresses. UPay’s overview of stablecoin storage risks explains why intended price stability does not remove issuer, custody, platform or operational risk. A completed blockchain transfer can also be difficult to reverse. Verifying the recipient’s address, network and supported token before sending remains important. Conclusion The 141% increase shows substantial growth in crypto activity across three of Canada’s most important Asian transfer corridors. Stablecoins appear to be moving beyond trading and becoming part of the infrastructure used to transfer value internationally. The figures do not prove that crypto is always cheaper or that every observed transaction was a personal remittance. Evaluating its practical value requires comparing the complete cost, processing time, access conditions and risks at both ends of the transfer.
AI-Linked Crypto Payments Surpass 138 Million as Micropayments Expand
More than 138 million transactions have passed through the x402 crypto-payment protocol on the Base blockchain, according to new research examining the growth of AI-driven commerce. Chainalysis published the findings on 14 October as part of its 2026 North America crypto-adoption report. The activity includes payments for AI-model access, code analysis, search tools, data feeds and other digital services that software can purchase while completing a task. The headline count demonstrates substantial protocol activity, but it should not be interpreted as 138 million individual customers or purchases made by fully independent AI systems. Key Takeaways How x402 Payments Work The protocol uses the HTTP 402 “Payment Required” response to allow a website or online service to request payment before providing a digital resource. Compatible software can receive the request, send a blockchain payment and continue the task after payment is confirmed. A developer can therefore fund a wallet and allow an AI agent to pay for approved services without manually authorising every small transaction. These transactions differ from ordinary online purchases because many involve machine-readable resources rather than physical goods. Examples include an API response, access to an AI model, a search result or an automated software-security check. UPay’s explanation of how AI bots can use payment cards examines another route for automated payments. Card-based and on-chain systems can support similar workflows, but they use different authorisation, settlement and dispute processes. Why Most Payments Are So Small More than 87% of the transactions analysed in Chainalysis’s extended payment-size sample fell between one hundredth of a cent and ten cents. Payments at this scale can make sense when software purchases one API request or a small piece of data at a time. A human user would be unlikely to complete a checkout process for every fraction-of-a-cent purchase, while software can execute repeated transactions automatically. Understanding how crypto payments work helps explain why blockchain-based settlement is being considered for these machine-to-machine interactions. Digital assets can move between compatible wallets without requiring a person to enter card details for every request. However, a large number of micropayments does not automatically represent a large amount of revenue. The reported distribution covers a wide range, and multiplying the total transaction count by an assumed average would not produce a reliable market value. What the 138 Million Figure Does Not Show A transaction is an action recorded on a blockchain, not necessarily a separate customer. One funded wallet can make thousands of requests. A developer can operate several wallets, while several agents may share the same wallet. Promotional campaigns, token issuance and automated testing can also generate substantial activity without representing sustained commercial demand. The count is therefore useful evidence of x402 protocol usage, but it cannot independently establish: Chainalysis also notes that early x402 activity included short-lived interest involving speculative tokens. More durable categories now include information services, development tools and AI-model access. US Wallets Dominate Identified AI Spending US-linked wallets represented 88.1% of geographically identified payments for AI-model inference. Their shares were lower in other categories, including agent frameworks, tool catalogues, data services and search APIs. These percentages apply only to wallets that could be geographically associated. They should not be treated as a complete map of every user or developer participating in the protocol. The research also concerns x402 activity on Base. It does not cover every automated crypto payment across all blockchains, nor payments made by AI systems through bank transfers or card networks. Controls Remain Important Allowing software to make payments introduces operational questions about budgets, permitted recipients and transaction limits. An automated system should not have unrestricted access to funds merely because each individual payment is small. Repeated micropayments can accumulate, and faulty instructions or compromised credentials could trigger unintended spending. Crypto-payment gateways can help businesses manage parts of the process, including conversion and compliance. UPay’s guide to the role of crypto payment gateways explains how these services connect blockchain payments with broader merchant systems. Conclusion The x402 figures show that automated crypto payments have moved beyond isolated demonstrations. Software is already using on-chain transactions to purchase data, model access and digital tools at a scale that would be difficult to manage through manual checkout processes. The 138 million total nevertheless measures protocol transactions rather than autonomous customers or economic value. Continued wallet funding, repeat usage and verifiable merchant revenue will provide stronger evidence of whether agent-driven payments are developing into a durable commercial market.
EU Banking Authority Classifies USDC as Its First Significant E-Money Token
The European Banking Authority has classified USDC as the first “significant” e-money token in the European Union under the Markets in Crypto-Assets Regulation. The decision, announced on 14 October, changes how the EU operations behind USDC will be supervised. From 12 November 2026, responsibility for areas including reserve assets, liquidity, own funds, recovery planning and redemption arrangements will transfer to the EBA. France’s Autorité de Contrôle Prudentiel et de Résolution will continue supervising other areas, including governance, outsourcing, conflicts of interest and assessments of key shareholders and managers. The designation reflects USDC’s scale and regulatory importance. It is not a statement that the token has received a government guarantee or become legal tender. Key Takeaways What Is a Significant E-Money Token? Under MiCA, a stablecoin referencing one official currency can fall within the category of an e-money token. The framework allows the EBA to classify an e-money token as significant when it meets enough of the criteria established in the regulation. Those criteria consider matters such as the token’s size, number of holders, transaction activity, cross-border importance and connections with the financial system. The “significant” label therefore relates to scale and potential impact. It does not mean that other authorised e-money tokens are unregulated or that USDC has been endorsed as an investment. MiCA requires the EBA to reassess these classifications periodically. A token’s status can consequently depend on whether it continues to satisfy the applicable criteria. How Supervision Will Be Divided The EBA’s announcement establishes a dual-supervision arrangement between the European authority and France’s national prudential regulator. The EBA will assume direct responsibility for requirements most closely connected to financial resilience and holders’ ability to redeem their tokens. These include: The French regulator will continue to oversee governance, outsourcing, conflicts of interest and other organisational requirements. This division shows why regulatory compliance in cryptocurrency cannot be reduced to obtaining one licence. Different authorities may supervise separate parts of the same service or product. What the Decision Means for USDC Holders The classification does not itself change the intended value of one USDC or create a new conversion rate. Its immediate effect concerns regulatory oversight of the EU issuer. For holders, reserve management and redemption arrangements are particularly relevant. A stablecoin is designed to track a reference currency, but maintaining that relationship depends on the assets and processes supporting it. UPay’s discussion of stablecoin storage risks explains why intended price stability should be considered alongside issuer, reserve, liquidity and platform risks. The new classification also does not protect a user against every possible loss. Someone may still send tokens to an incorrect address, use an incompatible network, expose account credentials or hold USDC through a platform facing separate operational problems. Understanding how crypto payments work remains relevant because issuer supervision and transaction execution address different stages of using a stablecoin. Cross-Border Oversight Remains Important USDC is issued in the EU by Circle Internet Financial Europe SAS and in the United States by a separate Circle entity. To support supervision across those markets, the EBA has entered into an information-sharing agreement with the New York State Department of Financial Services. The arrangement is intended to help authorities coordinate their monitoring of cross-border stablecoin activity. It does not merge the two regulatory systems or make every USDC service available under identical conditions worldwide. Platforms can still apply different requirements depending on location, licensing and the services they provide. Conclusion USDC’s classification marks the first time an EU e-money token has moved into MiCA’s significant-token supervisory framework. The practical change is stronger and more centralised oversight of the EU issuer’s reserves, liquidity and redemption planning from 12 November. It should not be interpreted as a guarantee against losses or an official recommendation to hold the token. For users, the relevant protections still depend on both the regulated stablecoin and the wallet, network or platform through which it is accessed.
France Advances 31.4% Tax Proposal for Crypto-to-Stablecoin Conversions
France’s National Assembly has adopted a budget amendment that would make certain cryptocurrency-to-stablecoin conversions taxable from 1 January 2027. The proposal would apply France’s 31.4% flat tax to qualifying gains realised when individuals exchange crypto assets for electronic money tokens linked to an official currency. This category includes certain fiat-backed stablecoins regulated under the European Union’s Markets in Crypto-Assets framework. Although lawmakers adopted the amendment on 16 October, the measure is not yet law. It remains part of France’s proposed 2027 budget and must survive the remaining legislative process before taking effect. Key Takeaways What the Amendment Would Change France currently allows many exchanges between crypto assets to occur without immediately triggering capital-gains tax. Tax generally becomes relevant when a person converts cryptocurrency into fiat currency or uses it to purchase goods or services. The proposed amendment would narrow that treatment for conversions into qualifying stablecoins. Exchanging an asset such as Bitcoin for an eligible euro- or dollar-linked token could become a taxable disposal, even when the holder does not withdraw money to a bank account. The change is intended to treat certain stablecoin conversions more like cashing out into conventional currency. Other exchanges between crypto assets would not automatically receive the same treatment. UPay’s existing French crypto-tax guide explains the current reporting framework and how disposals are recorded. If the amendment becomes law, its final wording and implementation guidance would determine how that framework changes from 2027. The Rate Applies to Gains, Not the Full Swap The 31.4% figure refers to the proposed tax rate on the calculated gain. It should not be described as a charge on the complete value of every stablecoin conversion. For example, suppose someone bought a crypto asset for €8,000 and later exchanged it for qualifying stablecoins worth €10,000. The economic gain would be €2,000 before considering the precise calculation method and any applicable rules. The headline rate would concern that gain rather than the entire €10,000 received. Actual French calculations can depend on the taxpayer’s overall portfolio and circumstances. A simplified example therefore cannot determine an individual liability. This distinction is important because crypto-tax systems vary considerably. Some jurisdictions already treat almost every crypto-to-crypto exchange as a disposal, while others defer taxation until assets are converted or spent. UPay’s wider collection of country-specific crypto-tax guides illustrates why users cannot assume that one country’s treatment applies elsewhere. Why Transaction Records Would Matter If stablecoin swaps become taxable, taxpayers may need to establish the euro value of the assets exchanged, their acquisition cost and the date of each transaction. A wallet balance alone cannot provide all that information. Supporting records may include exchange histories, purchase confirmations, wallet transactions, fees and the market value recorded when the swap occurred. Maintaining those records becomes particularly important when the same asset was acquired at different prices or moved between several wallets and platforms. The movement of an asset between wallets controlled by the same person should also be distinguished from a disposal to another party. The proposal forms part of a broader movement toward closer oversight of digital-asset activity. UPay’s overview of crypto regulatory compliance explains how taxation, reporting and customer-verification rules can impose separate obligations. What Happens Next? The Assembly’s adoption does not guarantee that the amendment will appear unchanged in the final budget. The proposal remains subject to further consideration before the legislation can be enacted. Taxpayers should therefore distinguish the proposed 1 January 2027 start date from a confirmed obligation. The final budget text and subsequent administrative guidance will determine which stablecoins qualify, how gains must be calculated and what reporting procedures apply. Conclusion France’s proposal would move qualifying stablecoin conversions closer to the tax treatment of cash disposals. Its most important practical effect would be to make a transaction potentially taxable before funds ever reach a bank account. For now, the amendment represents an approved legislative proposal rather than a completed change in law. The final budget and implementation guidance remain the documents that will establish what French crypto holders must do.
Ledger Tightens Reseller Controls After Hardware Implant Attack
Hardware-wallet manufacturer Ledger is tightening its reseller and distribution controls after modified devices captured customers’ recovery phrases during setup. Ledger said criminals purchased genuine devices, installed concealed components and returned them to circulation through resellers in Southeast Asia. The company described the incident as a localised distribution attack rather than a compromise of its chips, operating system, servers or direct-sales infrastructure. Technology publications have linked the modified devices to approximately $93 million in stolen cryptocurrency. Ledger’s official response, updated on 15 October, does not confirm that loss estimate. Key Takeaways How the Modified Devices Worked According to Ledger, the attackers bought genuine hardware wallets, opened them and installed hidden components capable of collecting recovery phrases. The devices were then placed back into reseller distribution. A recovery phrase can be used to reconstruct the private keys associated with a wallet. Anyone who obtains it may therefore be able to recreate the wallet elsewhere and authorise transactions without possessing the original device. This is why a recovery phrase must be treated differently from an ordinary password. UPay’s guide to cryptocurrency wallet types explains that wallets manage the cryptographic keys used to control blockchain assets rather than storing the assets themselves. Once those keys can be reproduced, physical possession of the original wallet may no longer protect the funds. Why the Attack Evaded a Software Check Ledger said the implanted component operated outside the chip running its official firmware. Its normal authenticity test could verify the legitimate device while failing to identify separate hardware added during distribution. This distinction does not mean that hardware wallets provide no protection. A crypto hardware wallet is designed to isolate private keys from internet-connected devices and reduce exposure to certain forms of malware. However, offline key storage and supply-chain integrity address different risks. A legitimate hardware wallet can protect keys from an infected computer, but a device modified before purchase may interfere with the process used to create or display those keys. The incident therefore highlights the importance of assessing both a wallet’s technical design and the route through which it reaches its owner. Ledger Changes Its Reseller Requirements Ledger said it examined devices from shops and warehouses without finding additional compromised units. It nevertheless suspended sales through authorised distributors in the affected regions while investigating. The company is also introducing stricter reseller requirements. Products should be kept away from open shelves and displays, unusual-device reports must be escalated promptly, and returned devices must never be resold—even when they appear unopened. Ledger has advised affected customers to contact its support team through official channels. Users should be particularly cautious about unsolicited messages offering wallet recovery or compensation. UPay’s guidance on choosing a crypto wallet notes that entering a recovery phrase into an unverified website or application can give an attacker control of the associated assets. Opening a suspected device without appropriate technical guidance may also damage it or destroy useful evidence. Conclusion The attack did not require compromising Ledger’s servers or firmware. Instead, criminals reportedly targeted the path between legitimate production and customer setup. That distinction makes the incident relevant beyond one manufacturer. Hardware security depends not only on how a wallet is designed, but also on how it is distributed, returned and sold. For users, verified purchasing channels and careful recovery-phrase handling remain essential parts of wallet security.