Supply-Chain Attack on Ledger Devices Results in Loss of Over $100 Million in Cryptocurrency

A significant supply-chain attack targeting Ledger hardware wallets has led to the theft of over $100 million in cryptocurrency, affecting more than 300 wallets. The attack was linked to CryptoBilis, a reseller based in Southeast Asia, which sold compromised devices. One wallet associated with an alleged crypto scammer lost over 60 Bitcoin, valued at approximately $4.8 million, during this coordinated strike that occurred on October 9, 2026.

Ledger confirmed that at least one affected device contained an unauthorized hardware implant that captured users' 24-word seed phrases, which are essential for accessing cryptocurrency wallets. These phrases were transmitted over cellular networks, allowing the attackers to drain funds from multiple wallets almost simultaneously. Initial estimates of the total losses ranged from $72 million to $86 million but were later revised to between $93 million and $102 million as investigations progressed.

In response to the incident, Ledger has been providing updates and guidance to users who purchased devices from CryptoBilis within the last 90 days. The company emphasized that its own sales channels remain secure and urged customers to exercise caution during device setup. The attack has raised concerns about the safety of hardware wallets and may lead to increased regulatory scrutiny and demands for accountability from manufacturers.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News