Ledger, the Paris-based hardware wallet manufacturer, announced on October 9, 2026, that it is investigating reports of fund losses among users in Southeast Asia who purchased devices from a third-party reseller named CryptoBilis. As a precautionary measure pending the investigation's results, Ledger has requested that CryptoBilis pause all sales and shipments of its devices. The company advised customers who bought from this reseller within the past 90 days not to set up their new devices if they have not already done so. For those who have already initialized their wallets, Ledger recommended moving assets to a new device with a fresh seed phrase to mitigate potential risks.
While Ledger has not confirmed the total amount of losses or the specific cause, pseudonymous crypto investigator Specter traced over $86 million in suspected thefts across Ethereum, Tron, and Bitcoin networks. Data shared by the investigator indicates approximately $42 million in ETH, $17.6 million in BTC, and $16.5 million in USDT were involved. Hardware wallets are designed to keep private keys offline, but vulnerabilities can arise if a device is compromised before reaching the buyer, such as through pre-known recovery phrases. No tampering has been officially confirmed by Ledger, which stated it does not yet know how many customers were affected.
The incident underscores the critical operational risks inherent in hardware wallet supply chains, particularly when distribution relies on third-party resellers rather than direct manufacturer channels. Although Ledger’s devices are engineered for offline key storage, the potential compromise of physical units prior to delivery exposes users to sophisticated attacks where attackers possess valid recovery phrases. This scenario highlights a gap between theoretical security models and practical logistics, suggesting that institutional and retail adoption must account for provenance verification as a core component of custody infrastructure.
Market structure implications extend beyond immediate financial loss, impacting consumer confidence in self-custody solutions during a period of heightened security volatility. With recent high-profile exploits affecting other major platforms like Bitget and Drift, this event reinforces the necessity for rigorous vendor due diligence and transparent communication protocols. Stakeholders should monitor whether regulatory frameworks evolve to mandate stricter supply chain integrity standards for cryptographic hardware, as well as observe Ledger’s subsequent forensic findings to determine if systemic vulnerabilities exist in its distribution network.
