Ledger is investigating reports of fund losses among users in Southeast Asia who purchased hardware wallets from the reseller CryptoBilis. The company has requested that the retailer pause all sales and shipments of its devices while the investigation is ongoing.
Ledger advises customers who bought devices from CryptoBilis within the last 90 days to avoid setting them up. Users who have already activated their wallets are encouraged to transfer their assets to a new device with a fresh seed phrase.
While the cause of the incident remains unconfirmed, Ledger stated that its own infrastructure and services are secure. CryptoBilis is an authorized reseller in Indonesia, Malaysia, and the Philippines, though former founders claim the business was transferred to new owners in March 2026.
On-chain researchers have identified suspicious transactions linked to multiple addresses, with estimates of potential losses ranging from $72 million to over $86 million in Bitcoin, Ethereum, and TRON. These figures are not verified by Ledger.
Tibane Labs identified hardware implants in Ledger Nano X devices that can intercept seed phrases via the screen display. The researchers noted that these implants appear to be mass-produced, though they have not confirmed a direct link between these specific devices and the CryptoBilis case.
