Ledger is investigating reported fund losses tied to CryptoBilis, a Southeast Asian reseller, and has warned users. Separate research estimates $72 million to $86 million in suspected crypto thefts.
Disclaimer: News content is based on public news sources and provided for information only. It does not constitute investment advice.
Ledger, a French hardware wallet manufacturer, is investigating reports of fund losses connected to CryptoBilis, a reseller operating in Southeast Asia. The company has warned users about the situation, according to a report from Cointelegraph dated October 9, 2026. CryptoBilis is described as a reseller, meaning it distributes Ledger devices rather than manufacturing them. Resellers are a common channel for hardware wallets in regions where direct sales are limited. The investigation is ongoing, and Ledger has not publicly disclosed the total amount of losses or the number of affected users.
Separately from Ledger's investigation, researchers have estimated that between $72 million and $86 million in crypto assets may have been stolen in incidents under review. Those figures are estimates and have not been confirmed as directly tied to the CryptoBilis case. The range indicates the scale of potential losses across multiple suspected thefts, which could involve hardware wallet users. If private keys or seed phrases are compromised, attackers can transfer funds without needing further authorization. The overlap between this estimate and Ledger's probe is not yet clear, leaving open whether the losses stem from a single cause or several.
Hardware wallets are designed to store private keys offline, but the security depends on the device arriving in an untampered state. When a reseller handles the product, there is a potential point of failure if the device is opened, modified, or pre-initialized with a seed phrase known to someone else. In such cases, a user might believe they are generating a new wallet, while an attacker retains access. This is why hardware wallet makers generally advise purchasing from official sources and verifying device integrity through companion apps. The CryptoBilis case highlights how third-party distribution can become a weak link even if the manufacturer's core technology remains sound.
Ledger has faced security-related challenges before, including a 2020 data breach that exposed customer information and led to phishing attacks. That incident did not involve hardware compromise but showed how stolen data could be used to target users. In the broader hardware wallet industry, supply chain tampering and fake devices have been recurring concerns, prompting manufacturers to add tamper-evident packaging and verification features. Resellers in emerging markets can improve access but also complicate accountability when losses occur. The current investigation into CryptoBilis will likely renew discussions about how hardware wallet companies oversee their distribution networks.
CryptoBilis is a reseller based in Southeast Asia that distributes Ledger hardware wallets. Ledger is investigating reported fund losses linked to purchases or devices obtained through this reseller, and it has issued a warning to users. The exact nature of the connection is still under investigation.
Researchers separate from Ledger have estimated that between $72 million and $86 million in crypto assets may have been stolen in incidents under review. This range is an estimate and has not been confirmed as entirely tied to the CryptoBilis case. Ledger has not disclosed its own loss figures.
Hardware wallets store private keys offline, but if a reseller tampers with a device or provides one that has already been initialized, an attacker could gain access to the user's funds. This is why manufacturers typically recommend buying from official sources and verifying the device's authenticity. The CryptoBilis investigation highlights this supply chain vulnerability.
Ledger's Investigation and Warning
Researchers Estimate $72M–$86M in Suspected Thefts
How Reseller Supply Chains Can Introduce Risk
Earlier Security Incidents and Industry Context
This article is rewritten from public news sources and further processed by AI. It is provided for information only and does not constitute investment advice — refer to the original source for the authoritative version.
Ledger has warned users about the situation and is investigating the losses. The company has not released a detailed public statement about the total number of affected users or the exact cause. Users are generally advised to check official Ledger channels for updates and to verify their devices if they suspect tampering.
The case draws attention to the risks that come with third-party distribution, even for products designed with strong security. It may lead hardware wallet makers to tighten oversight of resellers and improve device verification. It also underscores that user education about secure purchasing and setup remains important.
