Ledger is currently investigating reports of fund losses among customers in Southeast Asia who purchased hardware wallets from an unauthorized reseller. The company confirmed that at least one device contained an unauthorized hardware implant, which could potentially compromise private keys.
The affected users reportedly purchased their devices from CryptoBilis, a vendor based in Kuala Lumpur, Malaysia. Following the reports, Ledger advised customers to avoid setting up any devices bought from this reseller. Ledger stated on Sunday that CryptoBilis has since ceased the sale of its hardware wallets.
While Ledger has not disclosed the total financial impact, blockchain investigator Specter estimated that $86 million was drained from the compromised devices. The company is working with relevant authorities to address the incident and has reached out to the affected customers.
Ledger emphasized that the number of impacted products remains limited. The company continues to advise users against purchasing hardware wallets from unauthorized third-party vendors to avoid the risks of receiving counterfeit or modified devices that do not adhere to security guidelines.
