KEY INSIGHTS
- Ledger requested CryptoBilis to stop selling and shipping their devices pending investigations on the theft of customer funds.
- Specter from Onchain analysis firm estimated that about $86 million worth of cryptocurrency was lost but did not provide the number of wallets affected.
- Ledger advised recently acquired customers to refrain from using their devices and to think of transferring their assets.
Ledger has asked regional hardware wallet reseller CryptoBilis to suspend all sales and shipments of its devices while investigating reports of stolen cryptocurrency involving customers in Southeast Asia. The October 9 announcement also warned customers who purchased Ledger products from the reseller within the previous 90 days to avoid setting up unused devices.
The investigation is being carried out based on customer claims regarding the disappearance of their cryptocurrency despite efforts to safeguard their recovery phrases.
According to the investigation results conducted by Specter, an onchain investigator, the loss was above $86 million in various blockchains, although the total number of wallets that were affected could not be established.
Ledger has neither confirmed the figure nor verified that all complaints were associated with CryptoBilis acquisitions. The company has advised customers who already configured their devices to consider transferring their assets to a new signer secured by a freshly generated seed phrase.
Ledger CryptoBilis Investigation Prompts Customer Warnings
Ledger announced the precautionary sales suspension through its official support account on X. The company said the restriction would remain in place while it investigated reports involving customers who purchased devices from CryptoBilis.
Source: Ledger Support
The guidance covers purchases made during the previous 90 days. Users who have not initialized their devices are encouraged to delay doing so, whereas users who have previously set up their wallets are advised to transfer their money to a new Ledger signer with a new seed phrase.
Ledger has not yet confirmed which device models were implicated in the reports, nor has it explained how the crypto coins were withdrawn from those accounts. The company’s announcement has failed to clarify the reason for the losses experienced by its customers.
CryptoBilis operates as a regional Web3 retailer and hardware wallet distributor in Malaysia and the Philippines. The company sells Ledger and Trezor products and organizes cryptocurrency community events.
The official reseller list on Ledger includes CryptoBilis for both Malaysia and Indonesia. The purchasing advice suggests that one should acquire the devices either directly from Ledger or via authorized resellers who procure their goods through its distribution channel. Nevertheless, the authorized status of the reseller does not confirm how the events happened.
Onchain Investigator Estimates Crypto Losses Above $86 Million
Specter reported on October 9 that funds from hundreds of victim wallets had moved into theft addresses across Ethereum, TRON and Bitcoin. The investigator estimated total losses above $86 million, with the reported breakdown including more than $42 million in ETH, $17.5 million in BTC and $16.5 million worth of USDT.
Specter subsequently clarified that the actual number of affected wallets had not been determined. The estimate remains an investigator’s assessment rather than a loss figure confirmed by Ledger.
The company has not released its own estimate of the stolen cryptocurrency or confirmed that every wallet in Specter’s analysis belonged to someone who purchased a device from CryptoBilis. The relationship between the full reported loss estimate and the reseller remains unverified.
Users that have not set up their hardware should put it on hold, and users who have already set up their wallets should think about transferring their funds to another Ledger wallet with another seed.
Ledger has not yet identified what device models have been reported and how the cryptocurrency was stolen from the wallets. This account remains an individual allegation and does not independently establish the cause of the loss.
Changpeng Zhao Discusses Potential for Supply Chain Attack
Speaking on X about the news, co-founder and former CEO of Binance Changpeng Zhao said that this event may be related to a localized supply chain attack from a single provider.
Source: CZ BNB
According to Zhao, there is a possibility that some users bought compromised devices. He also stated that participants across the BNB ecosystem were coordinating efforts to trace and recover the stolen assets.
His assessment has not been confirmed by Ledger. The company has not publicly established that counterfeit hardware or malicious physical modifications caused the reported thefts.
Former Mt. Gox CEO Mark Karpelès separately called on CryptoBilis to make its available inventory accessible for inspection. He sought checks for possible hardware implants or other physical modifications that could compromise devices.
FAQs
Why did Ledger suspend CryptoBilis sales?
Ledger requested the suspension as a precaution while investigating reports of stolen cryptocurrency involving Southeast Asian customers who purchased devices from the reseller.
What should recent CryptoBilis customers do?
Consumers who bought devices within the past 90 days must not initialize devices that have not been used yet. Consumers who have already configured their wallet must think about shifting their funds to a different signer with a newly created seed phrase.
How much cryptocurrency was stolen?
Specter estimated losses above $86 million, including more than $42 million in ETH, $17.5 million in BTC and $16.5 million worth of USDT. Ledger has not confirmed these figures.
