Ledger temporarily halted hardware sales via distributor CryptoBilis following reports of stolen funds exceeding $86 million.
An investigation revealed an unauthorized hardware implant in an impacted device, prompting Ledger to advise recent buyers against initial setup.
The reports involved users in Southeast Asia losing money. According to estimates from traffic researcher Spectre, the total losses exceed $86 million.
Instructions for those who purchased devices
Ledger advised customers who purchased devices from the reseller in the past 90 days not to proceed with the initial setup of their devices. Those who have already set up their device are urged to consider transferring their funds to a new device with a new password.
The company revealed that one of the affected devices had an unauthorized tampering with its hardware. CryptoBilis, for its part, has stopped sales of all such devices until the investigation is complete. At the same time, it has posted a warning on its website about the security of recovery codes and related scams.
What Ledger announced
On October 11, 2026, Ledger clarified that the issue affected a limited number of devices and that all of them had been sold exclusively through CryptoBilis. The company asked all resellers and distributors to only source products from approved channels and not to re-release returned products.
Top comments (0)