Ledger stated that all confirmed cases of fund losses reported last week originated from devices sold by the reseller CryptoBilis. The company confirmed that its own internal systems and direct sales channels remain secure and unaffected by the incident.
Onchain investigators reported that approximately $86 million in assets were stolen across the Ethereum, Tron, and Bitcoin networks. While Ledger has not verified this total, it confirmed that CryptoBilis has stopped all hardware wallet sales as the investigation proceeds.
Analysis by YFarmX suggests the attacker moved 2,810 ETH through the Tornado Cash mixer and converted 15 million USDT into USDD. Tether reportedly froze 10 million USDT, while 15,475 ETH, 203 BTC, and 10 million USDD remain unrecovered.
Ledger is currently working with authorities and contacting affected users. The company advised customers to avoid unauthorized resellers and warned that modified devices may contain additional hardware components like LTE modules.
The manufacturer is reviewing its reseller controls and enhancing hardware security measures. Ledger reiterated that users should never share their 24-word recovery phrases and advised those who purchased from CryptoBilis to move funds to new devices.
