Ledger investigates potential wallet tampering after reports of $86 million in crypto stolen
Finance
Ledger investigates potential wallet tampering after reports of $86 million in crypto stolen
The hardware wallet maker said it is investigating devices sold by a Southeast Asian reseller as social posts swirl about crypto assets drained from Bitcoin, Ethereum and Tron addresses.
By Krisztian Sandor|Edited by Sheldon Reback
Updated Oct 9, 2026, 11:01 a.m. EDTPublished Oct 9, 2026, 10:47 a.m. EDT
2 min readMake preferred on ShareShare this article
Copy linkX iconX (Twitter)LinkedInFacebookEmail
Make preferred on
Ledger wallet (Ledger)
Summary
Show
Ledger is investigating reports that more than $86 million in cryptocurrency may have been stolen from hundreds of wallets linked to devices sold by CryptoBilis, a Southeast Asian reseller, though the losses and connection have not been independently verified.
Ledger asked CryptoBilis to halt sales and shipments and advised recent buyers not to set up their devices, while customers who already activated wallets should consider transferring their assets to a new device with a newly generated recovery phrase.
A supply-chain attack involving tampered devices could be one possible explanation, but the cause, number of affected users and total losses remain unconfirmed.
Crypto hardware wallet maker Ledger said Friday it is investigating reports of stolen funds linked to devices sold through a reseller in Southeast Asia as a suspected $86 million heist threatens to add to the industry's mounting losses from exploits this year.
Pseudonymous blockchain investigator Specter said on X that more than $86 million in crypto may have been stolen from hundreds of wallets. There hasn’t been any independent confirmation of the amount of user assets affected.
Specter said they traced suspected theft addresses across Bitcoin, Ethereum and Tron after seeing reports from Ledger users on X and Reddit. It remains unclear whether the incidents are connected or what caused the losses.
Ledger acknowledged in the post the reports of missing funds from customers who purchased devices through CryptoBilis, a reseller in Southeast Asia, but did not confirm the reported loss amount or identify the cause.
As a precaution, the company said it asked CryptoBilis to pause all sales and shipments while its investigation continues. Ledger advised customers who purchased devices from the reseller within the past 90 days not to begin setting them up. Those who have already activated their wallets should consider moving their assets to a new Ledger device with a newly generated recovery phrase, the company said.
The potential theft may add to an already rough year for crypto security. Last month, crypto exchange Bitget suffered an exploit that resulted in over $350 million in stolen assets. Other major incidents included Liquid Network at about $320 million, Drift at $295 million and Kelp at $293 million, according to DefiLlama data.
Founded in 2014 and based in Paris, Ledger is a major maker of hardware wallets, devices that keep the private keys used to access cryptocurrency offline. The company says it has sold more than 7 million devices worldwide and its products are widely used by investors seeking to protect their crypto without relying on exchanges.
That makes any potential security issue involving its products significant for the broader crypto market. In this case, however, the investigation concerns devices sold through a third-party reseller, and there is no confirmed evidence that Ledger's own systems or wallet technology were compromised.
One possible explanation is a supply-chain attack, in which hardware wallets are tampered with before reaching customers. For example, an attacker could supply a device with a recovery phrase they already know, allowing them to access funds deposited into the wallet at a later date.
Such a scenario would differ from a breach of Ledger's own systems. However, there is no confirmation that device tampering or pre-generated recovery phrases caused the reported losses.
The incident remains under investigation, and it is unclear how many users were affected, whether the reported thefts are connected or how much cryptocurrency was lost.
Ledger said it would provide updates as the investigation progresses.
UPDATE (Oct. 9, 14:58 UTC): Adds further context about Ledger.
HackLedger
Latest Crypto News
1Everyone wants SCOTUS to take up prediction markets: State of Crypto 5 hours ago
2Clarity's failure could speed crypto innovation while shielding incumbents8 hours ago
3President Trump declares 'energy ceasefire' between Russia and Ukraine8 hours ago
4IMF finds demand for tokenized stocks, says the market is still volatile, illiquid11 hours ago
5One year after 10/10 flash crash, bitcoin and ether liquidity have rebuilt, but altcoins still face risks1 day ago
6Tokenized commodities look beyond gold as lending and oil open new markets1 day ago
7Bitcoin's $19 billion wake-up call: One-year after flash crash, has crypto learned anything?1 day ago
8Bitcoin's volatility has plunged, but extreme price swings are more frequent than in 20181 day ago
9Robinhood Chain slowdown spreads from fees to trading as transactions fall more than 40%1 day ago
10XRP Ledger patched decade-old bug that could create billions of dollars in XRP from nothing1 day ago
Latest Research
Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins
Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
By CoinDesk Research
Sep 24, 2026
Commissioned byRealFi
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
Why it matters:
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
View Full Report
More From Finance
IMF finds demand for tokenized stocks, says the market is still volatile, illiquid
Tokenized commodities look beyond gold as lending and oil open new markets
Visa survey says nearly half of APAC consumers open to using stablecoins by 2031
