Crypto Fraud Watch: A Cellular Spy Chip Inside Ledger Wallets, Sberbank Clears Russian Crypto Trading, and Strive’s 15% Bitcoin Dividend

Three of today's biggest crypto stories have little to do with code failing. A hardware maker confirmed that someone physically opened its devices before customers did, Russia's largest bank cleared a hurdle no U.S. firm can follow it through, and a Nasdaq-listed treasury company is marketing a 15% dividend it is not obligated to pay.

A Spy Chip in the Box: Ledger Confirms a Supply-Chain Implant

On October 13, Ledger confirmed that at least one of its signing devices sold through the Southeast Asian reseller CryptoBilis contained an unauthorized hardware implant. A microcontroller hidden in the enclosure read the 24-word recovery phrase off the screen during setup and transmitted it over LTE using an embedded SIM. Ledger says the implant never touched the Secure Element or transaction signing: a physical supply-chain attack, not a software breach. Researchers estimate losses of up to $93.2 million across more than 300 wallets, Tether has frozen $10 million in USDT tied to the thefts, and MediaMarkt Saturn pulled Ledger devices from European shelves.

That makes this a products and distribution case more than a cybersecurity one. Victims will weigh breach-of-warranty and strict product liability theories, and an offshore reseller at the center of the claim raises hard questions about personal jurisdiction, service of process, and collectability. Expect a fight over where the tampering happened, because every handoff between factory and customer is a potential defendant. The frozen Tether is the most realistic recovery asset, and $10 million will not stretch across $93 million in losses.

Sberbank Clears Russian Crypto Trading, and U.S. Firms Cannot Follow

Interfax reported on October 12 that the Bank of Russia added Sberbank to its register of cryptocurrency exchange operators, clearing the country's largest lender to offer Bitcoin, Ether, and USDT trading from December 1. The fact American readers need sits outside the Russian coverage: Sberbank has been under full blocking sanctions pursuant to Executive Order 14024 since April 2022. OFAC treats sanctions obligations as applying to digital assets exactly as they apply to dollars, and liability is strict, with no intent or knowledge requirement. Any U.S. exchange, custodian, or processor that facilitates a transaction in which Sberbank holds an interest has exposure regardless of what it knew.

Strive's 15% Preferred: Read the Dividend Language Twice

Strive disclosed on October 13 that it plans to raise $500 million through five million shares of Series A Perpetual SATS Preferred Stock at a $100 stated amount, paying a fixed 15% annual dividend beginning November 9, with Barclays and Cantor as joint bookrunners under an effective SEC shelf. The headline rate rewards a careful read. The dividend is cumulative but payable only when the board declares it, so missed payments accrue rather than trigger a default. SATS ranks junior to Strive's existing SATA preferred, and holders get a repurchase right only on a "fundamental change," a defined term almost always narrower than buyers assume.

How to Protect Yourself

The Ledger incident is a reminder that the weakest point in self-custody can be the box itself. Buy signing devices directly from the manufacturer rather than through marketplace resellers, airport kiosks, or discount distributors, and inspect packaging and tamper seals on arrival. Never initialize a device that ships with a pre-generated recovery phrase. If you bought a Ledger from CryptoBilis, do not initialize it; if you already used one, move your assets to a new device with a freshly generated phrase today.

If funds are already gone, the first hours matter more than the first lawyer. Preserve the device, packaging, serial numbers, and order records, because the purchase chain is the heart of any warranty or product liability claim. File with the FBI's IC3, and trace the stolen funds promptly, since issuer and exchange freezes are far easier to obtain while assets remain identifiable.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.