Ledger confirmed that a hardware wallet purchased from the Southeast Asian reseller CryptoBilis contained an unauthorized hardware implant. The company stated that the incident appears to be isolated to this specific reseller and its operations in Indonesia, Malaysia, and the Philippines.
Investigator Specter estimated that total losses across Bitcoin, Ethereum, and Tron could exceed $86 million. Ledger has not yet confirmed the exact number of affected customers or the total value of the stolen assets, noting that its own infrastructure and services remain secure.
CryptoBilis has suspended all sales of hardware wallet inventory while the investigation continues. Ledger is currently in active communication with the reseller to determine further steps and is coordinating with users through its official support channels.
Ledger advises customers who purchased devices from CryptoBilis to avoid setting them up. Users who have already initialized their devices are encouraged to transfer their assets to a new Ledger signer using a new seed phrase to ensure security.
