Tampered Ledger hardware wallets can pass the manufacturer's genuine check without raising security alerts because the modifications do not alter core device components. According to security researcher @tayvano_, these compromised devices avoid detection by leaving the CPU and firmware intact. The bypass occurs because the tampering method does not replace critical hardware or attempt to modify the device's firmware. As a result, the standard authenticity verification process fails to identify the physical manipulation, allowing altered units to appear legitimate to users during setup.