Ledger announces the Atom signer while sales stay paused after a reseller implant

The first test an Atom owner gets to run is on the box. Ledger says the packaging is designed to show whether it has been opened before it reaches the buyer, according to The Verge ^[19]. Ledger has confirmed that at least one tampered signer was sold by a reseller ^[2], so the box is where to start.

Most signer purchases rest on the working assumption that the device in the box is the device the maker built, and the reseller case broke it ^[2].

Ledger's other protections concern physical access. A protective enclosure around the secure element, MCU and FPGA is designed to detect drilling or opening, and the device detects removal of the display or back cover ^[18]. The back cover is paired to the unit and cannot be swapped with one from another Atom ^[18]. Ledger claims these measures would have blocked the screen reader implants in the recent incident ^[17]. The claim comes from the company itself, and the device is not available until summer 2027 ^[11].

The Atom has an eSIM of its own, limited to data ^[4]. The implant in the reported incident used an eSIM to send recovery phrases out ^[2]. The Verge's account does not say how the Atom's data connection is protected.

Ledger pitches the Atom as a phone-shaped signer. Two Atom owners can exchange encrypted messages that are decrypted inside Ledger OS ^[13], and AI agents can handle financial tasks through a partnership with OpenClaw without full access to wallets ^[6]. For now, the Atom is a reservation page. A refundable $100 deposit holds a Founder's Edition at $849, and the price rises to $899 after launch ^[12]. The difference is $50 ^[15].

Ledger is plain about who the Atom is for. It says the device is "not designed to replace your phone." ^[7] Head of PR Phillip Costigan told The Verge that Ledger did not try to match top Android handsets on camera and other specs ^[8]. The display is a 60Hz OLED, and there is a single rear camera ^[9]. The support terms are the stronger selling point: five years of Android OS updates and at least seven years of spare parts, including a user-replaceable battery ^[10]. In our view the buyer is someone who wants a signer with phone software and a long service life, and who already owns the phone.

For anyone buying a signer before the Atom exists, we would settle the channel before the model. Sort each device on two axes: whether it came from the maker or from a reseller, and whether you had a way to see that it had been opened before first use. Maker-sourced with visible evidence is the cleanest cell. Reseller-sourced with no evidence is the cell where we would hold off loading funds. The two mixed cells depend on how much the device will hold. The Verge made the same point in narrower terms, writing that the reports give pause before buying new Ledger hardware, "at least from a third-party seller" ^[14]. The cost of the strict rule is availability: Ledger has paused sales in southeast Asia and at MediaMarkt ^[3].