ledger

Between October 9 and 10, about $93M was drained from hundreds of wallets across six blockchains. The common thread is that these were all Ledger devices bought through CryptoBilis, an official reseller in Indonesia, Malaysia and the Philippines. Estimates vary depending on who's counting, from around $86M up to $94.5M, and Ledger hasn't confirmed any of the totals yet.
What do we actually know about the cause? Ledger confirmed that at least one affected device had an unauthorized hardware implant inside. That points to a supply chain problem, meaning the devices were likely tampered with somewhere before they reached the buyer. Ledger also says it has no sign that its own security infrastructure, systems or services were compromised. So this doesn't look like a flaw in every Ledger out there, and the confirmed reports so far are limited to people who bought from this reseller in Southeast Asia.
What we still don't know matters too. Ledger hasn't said how many devices were tampered with, which models were affected, or whether victims will be reimbursed.
On the recovery side, there's a little good news. Tether moved quickly and froze 37 addresses, with about $10M in USDT locked. PeckShield also traced around $3.89M of stolen USDT and TRX to Binance deposit addresses, which gives investigators a real lead. Even so, that's roughly 10% of what was taken. CZ has publicly urged the wider industry to help secure the stolen funds, so it's worth watching whether exchanges and authorities act on those flagged addresses.
Here's what Ledger is telling people who bought from CryptoBilis in the last 90 days:
✅ If you haven't set the device up, don't. Leave it alone.
✅ If you've already set it up, move your assets to a new Ledger signer with a completely new seed phrase.
CryptoBilis has reportedly closed its shops in all three countries, and Ledger has asked it to pause all sales and shipments while the investigation continues.
My takeaway is that "not your keys, not your coins" is only half the story. Your keys are only yours if the device generating them is clean. A few habits can save you a lot of pain:
🔹 Buy hardware wallets directly from the manufacturer, not from third-party sellers or marketplaces
🔹 Never use a device that arrives already set up
🔹 Never use a recovery phrase that's pre-written or pre-printed. You generate your own, always
🔹 Check the packaging and tamper seals, and if anything looks off, stop and don't use it
Even "official" resellers add a link to the chain you can't fully verify, and this case shows how costly that can be.
I'll keep following this story as Ledger releases more details. If you know anyone who bought a hardware wallet recently, especially in Southeast Asia, please share this with them. 🙏
Stay safe out there. 🔐
#Ledger #CryptoSecurity #HardwareWallets #SelfCustody #CryptoNews
$BTC $ETH $USDT

🚨 Hardware wallet security is back in the spotlight. 🔐
Reports say Ledger has asked resellers in parts of Southeast Asia and Hong Kong to temporarily pause sales while suspected device tampering is investigated.
📍 Markets reportedly affected include Singapore, Malaysia, Thailand, Indonesia, the Philippines, Vietnam and Hong Kong.
But until Ledger confirms the details, the full scope of the issue remains unclear. 👀
For now, remember three basic security rules:
🔐 Never share your 24 word Secret Recovery Phrase.
⚠️ Never enter it on a website or share it with someone claiming to be support.
🛡️ Follow official Ledger announcements before buying or using a device affected by a recall or security notice.
A hardware wallet is only as trustworthy as the security practices surrounding it.
👀 Have you seen an official update from Ledger about this situation?
#Ledger
#CryptoSecurity #HardwareWallet #CyberSecurity #CryptoSafety