TL;DR
- Ledger asked CryptoBilis to suspend sales and shipments of its devices while it investigates reports of potential cryptocurrency theft affecting customers in Southeast Asia.
- On-chain investigator Specter claims to have traced funds from hundreds of affected wallets, with estimated losses exceeding $86 million.
- The company advises customers who purchased devices from the reseller within the past 90 days not to set them up or to move their funds to a new device.
Ledger asked reseller CryptoBilis to suspend all sales and shipments of its hardware wallets while it investigates reports of potential cryptocurrency theft affecting users in Southeast Asia.
The decision followed allegations from on-chain investigator Specter that losses had exceeded $86 million. According to Specter’s analysis, hundreds of wallets allegedly transferred funds to addresses linked to the suspected attack.
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices.…
— Ledger Support (@Ledger_Support) October 9, 2026
The identified transactions span several blockchains, including Bitcoin, Ethereum, and TRON. However, The company has not yet confirmed the reported losses or what caused them.
Ledger Advises Customers to Move Funds to New Devices
The company issued specific instructions for customers who purchased CryptoBilis products within the past 90 days.
Customers who have not yet set up their devices should refrain from doing so. Those already using them should transfer their cryptocurrencies to a new hardware wallet configured with a completely new recovery phrase.
These recommendations are intended to prevent customers from continuing to use potentially compromised devices while the cause of the incidents is investigated.
Ledger said it would continue providing updates on the investigation and any measures it takes.
Ledger Rules Out a Breach of Its Systems
Ledger stated that, based on the information currently available, the incidents are limited to products sold by CryptoBilis in Southeast Asia.
The company said it has received no reports involving devices purchased directly from Ledger.
It also stated that its infrastructure, systems, and services were not compromised.
So far, it has not been publicly established how the affected wallets may have been compromised or whether all the funds identified by Specter are connected to devices sold by the reseller.
