Blockchain & Digital Assets Briefing — October 13, 2026
Ledger detailed an LTE spy implant that reads recovery phrases off the screen during setup on devices sold by reseller CryptoBilis, and MediaMarktSaturn pulled Ledger stock internationally as a precaution. Sberbank won Russian central-bank approval to trade crypto from December, the BIS said privacy-preserving digital cash is still not production-ready, and bitcoin whipsawed between $81,000 and $84,000 as Asia's chip selloff wiped out $803 million in leveraged positions.
Written by NPDev Labs with AI assistance and reviewed before publication. How we work.
Ledger details an LTE spy implant as MediaMarktSaturn pulls Ledger products
Ledger's Donjon security team said an unauthorized implant inside Ledger devices sold by Southeast Asian reseller CryptoBilis read the 24-word recovery phrase off the screen during setup and transmitted it over LTE using a provisioned eSIM. Ledger said the implant is a separate component that does not modify the device's Secure Element or its operating system, does not alter transactions or signatures, and is a physical supply-chain attack rather than a breach of its software or internal systems. It confirmed the implant on October 10 for one affected signer, says every confirmed loss involves CryptoBilis-sold devices, and is reviewing reports of tampered devices elsewhere — including a Ledger Flex reportedly bought at Singapore's airport and two devices a user says he bought from separate MediaMarkt stores in Germany. Ledger has not confirmed how many users are affected or the total lost; on-chain investigator Specter traced more than $86 million, CoinDesk reported up to $93 million traced with $10 million frozen, and other third-party estimates run higher. MediaMarktSaturn removed Ledger products from its stores and online platforms internationally as a precaution after a customer report in Germany; CryptoBilis halted sales and shipments of all hardware-wallet brands across Malaysia, the Philippines and Indonesia and temporarily closed its physical stores. Ledger said it is making its reseller network much smaller so it can vet every remaining partner.
Why it matters: This defeats the assumption that a hardware wallet is safe as long as the private key never leaves the device — the phrase is captured at setup, before any key exists. The practical response is not a firmware update: do not initialize reseller-sourced devices, and if you already have, move funds to a new seed generated on a device bought from a verified channel. Note the verification gap: the mechanism is confirmed by the vendor, but the dollar loss totals are still third-party estimates, and the European and Singapore reports are unconfirmed claims.
UK High Court says Chinese law governs claims to 61,000 seized bitcoin
The High Court in London ruled on Monday that Chinese law governs fraud victims' claims to 61,000 BTC seized from Zhimin Qian, worth roughly £3.8 billion (about $5 billion), after he pleaded guilty to defrauding more than 128,000 investors through a Ponzi scheme and converting the proceeds into bitcoin before fleeing to Britain in 2017. Justice Mark Turner sided with the Director of Public Prosecutions, finding that the fraud, the victims' payments and the contracts all took place in China and that the relevant damage occurred there, so each claimant must show a proprietary interest in the coins rather than relying on any broader compensation scheme. English law had been seen as substantially more favourable to the victims. The ruling does not decide who ultimately keeps the bitcoin: the content and proof of Chinese law are left to a later stage, and lawyers for the victims plan to appeal.
Why it matters: This is about which legal system, not which ledger, decides ownership of a multi-billion-dollar state-held crypto balance — and it materially improves the UK government's odds of retaining most of it. It is a procedural ruling on governing law, not a final order on the coins, so treat any headline about the bitcoin changing hands as premature.
ENS seeks DAO approval to activate its ENSv2 upgrade on Ethereum
Ethereum Name Service is asking its DAO to approve activating ENSv2, the next version of its naming protocol, on Ethereum mainnet. ENS Labs submitted an executable draft proposal: if approved, new registrations on the original registrar would freeze while existing domain holders keep renewing normally, and new .eth registrations would move to the upgraded system once domain records have been synchronized — with new registrations unavailable on either version for several hours during the transition. The upgrade introduces a redesigned registry architecture with more flexible domain management and permissions, and ENS Labs plans to hand its remaining administrative control over the upgraded contracts to the DAO after activation. Existing holders are not required to migrate and their names keep working. The proposal remains in draft and needs at least 1% voter participation (1 million ENS votes) plus majority approval over a seven-day vote, then a minimum two-day timelock; no voting date has been announced.
Why it matters: For the largest naming system on Ethereum, this is the step where control of the core registry shifts from the founding company to token governance, which matters more than the naming features for anyone treating .eth names as durable infrastructure. It is a draft proposal, not an activated upgrade, and the timetable depends on a DAO vote.
Sberbank clears Russia's central bank to trade crypto from December 1
Sberbank, Russia's largest lender, secured central-bank approval to trade cryptocurrencies including bitcoin after gaining digital custodian status, joining the register of authorized crypto exchange operators — now 10 operators and six custodians, up from four and five a week earlier, alongside VTB, T-Invest Lab and Atomyze. The bank plans to launch products supporting bitcoin, ether and Tether's USDT on December 1, 2026 through its existing SberBank Online, SberInvestments and SberBusiness platforms, and it has already begun testing crypto purchases, sales, deposits and withdrawals, according to Russian business newspaper Vedomosti citing the bank's press office. Sberbank said final timing depends on additional central-bank regulations, and Russia still prohibits using crypto to pay for goods and services.
Why it matters: This routes Russian retail and corporate crypto activity through a licensed bank channel with a custodian regime the central bank supervises, which is the same architecture other major markets are building — with the notable difference that the payments ban stays in place. The Dec. 1 date and product scope are the bank's stated plan and are conditional on further regulation, so treat it as an approved direction rather than a live service.
Federated Hermes plans its first tokenized fund shares by early 2027
Investment manager Federated Hermes plans to issue its first tokenized fund share classes in early 2027 and intends to issue them itself, moving beyond past arrangements where third parties tokenized its existing products, Kevin Barr, the firm's director of digital asset products and platform, told CoinDesk. Prometheum will provide regulated brokerage, custody and clearing services to bring the products to financial advisers and their clients.
Why it matters: The notable shift is a traditional manager choosing to issue onchain share classes directly, with a regulated broker-dealer and custodian in the chain, rather than bolting tokenization onto an outsourced wrapper — that is the pattern that actually changes fund distribution. It is a stated plan for early 2027, not a filed or effective offering, and no product terms were disclosed.
Bitcoin whipsaws between $81,000 and $84,000 as a chip-stock rout flushes leverage
Bitcoin rebounded toward $84,000 on Tuesday, up more than 2.5% from a low near $81,000, even as South Korea's KOSPI extended its selloff — down 5.5% on the day per CoinDesk and 7.4% for the week per Cointelegraph, slipping below its 200-day average for the first time since late July, with SK Hynix closing more than 10% lower. Crypto exchanges liquidated about $803 million of leveraged positions over 24 hours with bullish bets accounting for 86% of the losses, and SanDisk perpetual futures recorded $19.09 million of liquidations — more than XRP — before shorts took 79% of the following $74 million as prices recovered above $83,000. CoinDesk put the 20-week rolling correlation between bitcoin and the KOSPI at -0.41. U.S. spot bitcoin ETFs shed roughly $681 million in the week through October 9.
Why it matters: The catalyst is an Asian semiconductor and AI-valuation de-rating, not anything crypto-native, and the reversal within hours shows leverage being flushed on both sides rather than a change in demand. Watch ETF flows and macro prints for the durable signal; the $81,000–$84,000 range and the KOSPI divergence are positioning evidence, not a trend.
South Korea moves to block 27 unregistered crypto exchange websites
South Korea's Financial Intelligence Unit said on Tuesday it approved measures to block domestic access to 27 websites operated by unregistered crypto exchanges and other virtual asset service providers, including KuCoin, MEXC, Phemex, Bitrue, CoinW, BTCC, BitMart and BingX, following reviews by the Korea Media and Communications Standards Commission on October 6 and 7. The block applies to platforms that have not registered under the Act on Reporting and Using Specified Financial Transaction Information, the country's anti-money-laundering law, and involves terminating domestically hosted services or blocking access to overseas websites. It follows earlier restrictions on mobile apps, including 14 unregistered exchange apps on Apple's App Store after 17 on Google Play. The FIU said it assesses whether overseas operators target Korean customers by looking at Korean-language services, marketing to Korean users and won support, and that it will provide withdrawal guidance with the Digital Asset eXchange Alliance while acknowledging the blocks could complicate withdrawals for existing users.
Why it matters: This is the enforcement route around licensing — instead of prosecuting offshore venues, the regulator cuts off distribution at the app store and website level, which is what actually determines whether users can reach a platform. If you hold funds on one of the named exchanges, the operational risk is withdrawal access, not the exchange's solvency, and the FIU's own note flags that.
BIS says privacy-preserving digital cash works in prototype but is not production-ready
The Bank for International Settlements published Project Aurum Phase 2, a privacy-preserving digital cash prototype built on its existing Aurum codebase with the Hong Kong Monetary Authority. It combines BBS+ signatures, evolving pseudonyms and zero-knowledge proofs so payments can be validated and settled without exposing who paid whom or how much, while know-your-customer identity stays with the licensed onboarding bank rather than the central bank. Banks can still lock a coin, a subset of coins or a wallet, and a separate decree transaction lets a bank move a coin without the owner's key in an exceptional case such as court-ordered confiscation. The BIS said the stack is not production-ready: privacy protections add processing time and design complexity, maximally private wallets are harder to recover if access is lost, and compromising a single bank can expose that bank's customer data, though not other counterparties' customers. No production launch or dated milestone was set.
Why it matters: This is the technical answer to the central criticism of central bank digital currencies — that privacy would rest on an institution promising not to look — by moving it into cryptography by design. The trade-offs are the part to watch: faster, more private wallets trade against recoverability and compliance hooks, and those are policy choices that will reappear in national CBDC designs.