Ledger investigates reports of more than $86 million stolen from wallets sold by reseller CryptoBilis

On October 9, 2026, Ledger, a maker of hardware crypto wallets, said it was looking into reports of missing funds from wallets linked to devices sold by CryptoBilis, a reseller from Southeast Asia. An anonymous blockchain researcher, Specter, wrote about the possible theft of more than $86 million from hundreds of wallets. There is still no independent confirmation of either the amount or the link to the reseller's devices.

According to Specter, he traced the alleged theft addresses on the Bitcoin, Ethereum and Tron networks after Ledger users reported them on X and Reddit. It is not yet clear whether these cases are connected to each other or what exactly caused the losses. In its statement, Ledger acknowledged complaints about missing funds from customers who bought devices through CryptoBilis, but confirmed neither the amount of the losses nor the cause.

As a precaution, the company asked CryptoBilis to pause all sales and shipments during the check. Those who bought a device from this reseller in the last 90 days are advised not to begin setup. If the wallet is already activated, it is worth considering moving funds to a new Ledger device with a freshly generated recovery phrase.

The supply chain attack theory

One possible explanation: a supply chain attack, in which a wallet is opened and its data replaced before it reaches the buyer. For example, an attacker could supply a device with a recovery phrase already known to them and later gain access to the funds placed on it. However, there is no confirmation that the losses are linked specifically to swapped devices or pre-created phrases. Nor is there confirmation that Ledger's own systems or wallet technology have been compromised.

Other major incidents of the year

A month earlier, the exchange Bitget lost more than $350 million to an exploit; among other major cases, according to DefiLlama: Liquid Network about $320 million, Drift $295 million and Kelp $293 million.

Ledger was founded in 2014 in Paris and has sold more than 7 million devices worldwide. Hardware wallets store the private keys for accessing cryptocurrency offline, so any possible failure in the company's products matters to the market. Here the devices in question were sold through a third-party reseller, and there is no confirmation that Ledger's own systems or technology have been compromised. The investigation continues; how many users were affected and what the final loss total is remain unknown. Ledger promises to share updates as the check progresses.

Image: FlippyFlink CC BY-SA 4.0 · License

Translation editors: Соловьев В., Пеков А.