Ledger breach hits $86M: Southeast Asia reseller implicated

• Ledger identified an unauthorized hardware implant in devices sold by CryptoBilis in Southeast Asia, with reported losses exceeding $86 million
• The breach is isolated to CryptoBilis-supplied devices over the past three months; Ledger found no evidence of a wider supply chain compromise

On October 11, 2026, Crowdfund Insider reported that Ledger traced an unauthorized hardware implant targeting devices distributed by CryptoBilis, an authorized hardware wallet reseller serving users in Malaysia, Indonesia, and the Philippines. The discovery follows substantial cryptocurrency losses, with reported user funds drained exceeding $86 million and on-chain analysis indicating losses may approach or surpass $90 million across multiple blockchains, including Bitcoin, Ethereum, and Tron.

Ledger stated there is currently no indication that Ledger’s core systems or broader supply chain are compromised, confining the risk to this reseller’s recent shipments.

Ledger has urged customers who purchased hardware wallets from CryptoBilis and have not yet initialized them to avoid setting up the devices. For users who have already used an affected device, Ledger advised immediate migration of funds to a fresh wallet with a new recovery phrase generated on a known-safe device.

CryptoBilis has suspended all sales and shipments of hardware wallets while an investigation continues. The incident has underscored significant security risks for users purchasing hardware wallets through established retail channels, raising concerns about hardware integrity, industry trust, and the reputation of cryptocurrency security practices, according to Crowdfund Insider.