Ledger Links Wallet Drain to CryptoBilis Reseller as Loss Estimates Top $93M
Ledger said a targeted compromise in its physical supply chain affected some hardware wallets sold through CryptoBilis, an authorized reseller in Southeast Asia. The company found an unauthorized implant in one impacted device, though the exact theft method is still being investigated. An on-chain investigator estimated losses above $93 million, while Ledger maintained that its own systems, software, and direct sales channels were not affected.
Ledger’s 72-hour update on Oct. 11 said the issue was confined to hardware distributed by CryptoBilis, an authorized Southeast Asian reseller. The company said one affected unit contained an unauthorized implant, while the precise theft mechanism is still under investigation. Ledger also said its own infrastructure, software, and direct sales were unaffected.
On Oct. 9, after user reports on X and Reddit, Ledger told CryptoBilis to stop selling and shipping its wallets. Specter initially estimated over $86 million stolen across Bitcoin, Ethereum, and TRON. Bitquery later counted more than $93.2 million taken from 315 users across six networks. PeckShield said about $3.89 million reached Binance Tron deposit addresses.
The incident may heighten concerns among hardware-wallet owners, especially those who bought through third-party resellers, about physical tampering before devices reach them. Losses could affect individual holders and exchanges receiving traced funds, while resellers and manufacturers may face pressure to strengthen verification and shipping controls. It could also prompt broader scrutiny of how crypto users assess supply-chain trust, though Ledger says direct channels and software were unaffected.