On October 9, 2026, on-chain analyst Specter reported a coordinated theft of funds from Ledger hardware wallet users. The total losses are estimated to exceed $86 million, with some projections suggesting the final amount could reach $100 million.
The attack affected assets across the Ethereum, TRON, and Bitcoin networks. Analysis shows that funds were funneled into several specific addresses from hundreds of individual wallets. One identified Bitcoin address currently holds over 211 BTC, which remain stationary as of the report date.
Ledger has not issued a public statement or confirmed any vulnerabilities in its devices or firmware. Community discussions on platforms like X and Reddit suggest potential causes ranging from phishing attacks and compromised seed phrases to malicious third-party applications.
This incident follows other security issues in the sector, including a fraudulent Ledger Live application on the Apple App Store that resulted in losses of approximately $9.5 million earlier this year, and a separate vulnerability in the Zilliqa Ledger app.
In August 2026, a seed-generation flaw in Coldcard wallets led to losses exceeding $88 million. Users are currently advised to exercise caution by verifying software sources and avoiding the entry of recovery phrases into digital devices until the cause is determined.
