Hardware wallet maker Ledger has provided an update on its investigation into a draining incident from October 9th that resulted in approximately $91 million in stolen funds, according to an estimate from Galaxy Research head of firmwide research Alex Thorn.
The company says all confirmed cases related to the incident involve devices sold through Southeast Asia reseller CryptoBilis. Ledger's own systems and direct sales channels remain unaffected by the theft.
Ledger confirmed that one affected customer's device contained an unauthorized hardware implant, though the company has not stated whether the implant was responsible for all losses. The number of affected devices remains limited, according to the company.
CryptoBilis has confirmed it has stopped selling hardware wallets.
Recommended Actions
Ledger is advising customers who purchased devices through CryptoBilis not to initialize unused devices. For customers who have already set up a device, Ledger recommends moving funds to a new seed on a device purchased directly from Ledger.
The company encourages affected users to contact Ledger Support through official channels and to file complaints with local law enforcement authorities.
Ledger also stressed the importance of purchasing hardware wallets only from authorized sources, warning that unauthorized resellers carry increased risk of purchasing counterfeit or modified devices that do not operate under Ledger's security guidelines.
