Over $86M drained from Ledger hardware wallets, all tied to one reseller đ
What is known
â Victims in Indonesia, Malaysia, Philippines
â All bought from the reseller CryptoBilis
â Funds traced to theft addresses on $BTC , $ETH and Tron
â Estimates range from $72M to $93M. Ledger has not confirmed a number
What Ledger says
đą No evidence its systems were breached
đŽ Reseller told to pause sales
đŽ Bought from this reseller in the last 90 days â do not set up the device
đŽ Already set up â move funds to a new device with a new seed
Leading theory: tampered devices in the supply chain. A firmware zero-day looks unlikely according to security researchers. Not confirmed yet.
Why this matters for traders: $90M of stolen coins will look for an exit. On BTC that is 0.5% of a day's volume. On smaller tokens it can show up as one-sided selling.
Self-custody basics: buy direct, check the seal, generate your own seed.
Where did you buy your hardware wallet? DYOR.
#Ledger #CryptoSecurity #SelfCustody
What is known
â Victims in Indonesia, Malaysia, Philippines
â All bought from the reseller CryptoBilis
â Funds traced to theft addresses on $BTC , $ETH and Tron
â Estimates range from $72M to $93M. Ledger has not confirmed a number
What Ledger says
đą No evidence its systems were breached
đŽ Reseller told to pause sales
đŽ Bought from this reseller in the last 90 days â do not set up the device
đŽ Already set up â move funds to a new device with a new seed
Leading theory: tampered devices in the supply chain. A firmware zero-day looks unlikely according to security researchers. Not confirmed yet.
Why this matters for traders: $90M of stolen coins will look for an exit. On BTC that is 0.5% of a day's volume. On smaller tokens it can show up as one-sided selling.
Self-custody basics: buy direct, check the seal, generate your own seed.
Where did you buy your hardware wallet? DYOR.
#Ledger #CryptoSecurity #SelfCustody