This Week in Crypto (October 12–19): Ledger's Implant Sent Seed Phrases Over LTE, MSCI Adopts a Rule That Could Drop Strategy, and Richard Heart Is Detained in Istanbul

Last week was about tampered hardware wallets draining their owners. This week in crypto, we learned how the attack worked, and it turned out to be a lesson about seed phrases. Ledger traced the theft to a hidden cellular implant, and an unrelated chain halted after weak seeds were drained. In between, a hot inflation print pushed bitcoin below $80,000, MSCI adopted a test that could remove Strategy from its indexes, and Turkey detained Richard Heart. Here's the week, story by story.

The week at a glance

The Ledger implant read the seed phrase off the screen and sent it over LTE

On October 13, Ledger's Donjon security team explained how devices sold by the Southeast Asian reseller CryptoBilis were drained. A separate component hidden inside the case read the 24-word recovery phrase as the screen displayed it during setup, then transmitted it over a cellular network using a built-in eSIM.

On X: @Ledger — the Donjon update: the implant never touched the secure chip or Ledger's software.

That detail matters. The secure element did its job; the attack simply copied the phrase that unlocks it. Third-party estimates now run from $93.2 million (Bitquery) to $103.4 million (YFarmX). Ledger hasn't confirmed a total.

The same day, MediaMarkt Saturn pulled Ledger devices from its European stores after one customer in Germany reported an implant. No losses were reported there, and Ledger said devices it inspected from German retailers showed no tampering.

On X: @Ledger — MediaMarkt Saturn paused sales "with Ledger's alignment" while the investigation continues.

On October 15, Ledger banned resale of returned devices and unveiled Atom, an $899 device with tamper sensors, shipping in summer 2027. For now, we'd suggest buying hardware wallets directly from the manufacturer and treating any phrase shown on a suspect device as exposed.

A hot CPI print pushed bitcoin under $80,000 for the first time in a month

September CPI, released October 14, came in at 3.7% year over year, above the 3.6% forecast. The bigger miss was core inflation: 0.3% for the month against 0.2% expected.

On X: @TheBlockCo — bitcoin fell below $82,000 as core prices rose "more than expected."

The odds of an October rate hike briefly reached nearly 45% on CME FedWatch. Then, on October 15, South Korea's Kospi fell another 7.5% and a selloff in AI stocks spread. Bitcoin traded at $79,950 that morning, its first print below $80,000 in about a month, before buyers lifted it back to around $82,000.

Leverage did the rest. Liquidations reached nearly $1 billion on October 15, and spot bitcoin ETFs lost about $261 million on October 14 alone. When most open bets point the same way, a small drop forces sales that make it bigger; our perpetual DEX guide walks through how that happens. By October 15, hike odds had eased to 27% ahead of the October 27–28 Fed meeting.

MSCI adopted the rule that could drop Strategy from its global indexes

On October 15, MSCI adopted a screen for "non-operating companies" in its global indexes. A company fails if it lacks substantial operating assets and trips at least four of five financial ratios. Existing members must fail in two consecutive annual filing periods before they're removed.

On X: @business — Bloomberg: the rules could push Strategy out of MSCI's benchmarks, "potentially triggering billions of dollars in stock sales."

An earlier MSCI simulation flagged Strategy and Metaplanet as potential deletions. JPMorgan has estimated about $2.8 billion of passive selling if Strategy goes. Strategy called the methodology "discriminatory, arbitrary, and misguided" in its consultation response.

Nothing has been removed yet. The November 11 list decides it.

Turkey detained Hex founder Richard Heart on a Finnish Interpol notice

Richard Heart, founder of Hex and PulseChain, was detained with his wife in Istanbul on October 14. Finland has sought him under an Interpol Red Notice since December 2024 over alleged tax evasion and assault.

On X: @abakingurlek — Justice Minister Akın Gürlek confirmed the arrest on October 17, saying Turkey will not become a haven for wanted suspects.

Gürlek said police searched 15 addresses and seized $7.15 million in cash, six cold wallets and firearms. Early reports had put the cash at $4 million. Hex fell about 14% in a day.

Two details worth keeping straight. Gürlek described the case as a $1 billion fraud across the U.S. and Finland, but the SEC's U.S. case was dismissed in 2025 on jurisdictional grounds. And Turkey hasn't said whether Finland has requested extradition.

The kicker: Qubic halted its chain after Math.random() seeds were drained

And because crypto never lets a lesson about seed phrases land just once: on October 18, Qubic halted its network after an attacker drained 1,404 wallets of about $1.4 million in 104 minutes.

The cause was the web wallet's random number source. It generated seeds with JavaScript's Math.random(), which isn't built for cryptography, so some seeds could be guessed. Qubic switched to a secure generator in version 4.26.4.

On X: @Qubic — "87.1% of the drained funds never left the Qubic network and remain frozen in place."

Small money, familiar lesson. A seed is only as strong as the randomness behind it; our seed phrase guide covers what good generation and storage look like.

Also this week

• The EBA named USDC the EU's first "significant" e-money token on October 14. It's one of 45 notified under MiCA; from November 12, the EBA directly supervises USDC's reserves and liquidity.
• Starknet opened a seven-day vote on October 15 on researching a move to its own layer 1. Early counts showed 99.91% of 177.6 million STRK voting yes; a yes starts research, not a migration.
• The OCC's final debanking report found all nine of the largest banks it supervises had policies that could restrict lawful businesses. Crypto firms were among them, though the October 14 report documented no individual crypto cases.
• Deutsche Bank said its bitcoin and ether custody launch in Germany is weeks away. Expansion to Asian financial centers is planned for 2027, subject to regulators.

What to watch next

Starknet's vote closes October 22, and the Fed meets October 27–28 with hike odds near 27%. MSCI publishes its final list on November 11, the same week USDC moves under EBA supervision (November 12). Watch for Ledger's confirmed loss figure and a recovery vote on Qubic's frozen funds.

If this week has you checking where your phrase was generated, Coin98 Super Wallet can pair with a Ledger bought directly from the manufacturer, so your keys stay on the device.

Last updated: October 2026