Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC 
ETH 
XRP Ledger's hardware wallet infrastructure was attacked and approximately US$92.9 million in assets were stolen.
According to relevant reports, a fund theft incident related to Ledger's hardware wallet infrastructure resulted in asset losses on Bitcoin, Ethereum and Wave Field (TRON) three major blockchain networks totaling approximately US$92.9 million. The incident spanned three separate blockchain networks, making it one of the most widely distributed hardware wallet-related losses on record.
Detailed summary of the event
The event is described as Ledger-related, meaning that the loss is in some way related to the Ledger ecosystem and not just limited to the device firmware itself. U.Today's investigation provided the main report on the amount of $92.9 million in losses; loss allocation data circulated on social media has not yet been confirmed and should be treated as unconfirmed information until Ledger or a trusted blockchain forensics company publishes a verified detailed report.
This theft involved assets stored in Bitcoin, Ethereum and Bochang wallets. Because the three networks use different address formats and transaction models, such a large loss of coordination suggests several possibilities: a shared signature vulnerability, a breach of supply chain components, or a phishing attack against users, thereby extracting mnemonic words rather than directly exploiting device firmware vulnerabilities.
这并非Ledger更广泛的生态系统首次卷入大规模损失事件。此前，在Binance创始人赵长鹏呼吁对钱包进行隔离后，发生了一起价值8600万美元的Ledger经销商黑客攻击事件。那次攻击同样利用了核心设备之外的供应链环节，说明了硬件钱包的安全性远不止于设备本身。
各受影响区块链的具体情况
比特币（Bitcoin）：由于其UTXO（未花费交易输出）模型，任何被盗的BTC都可以通过链上追踪，从受 compromised 的地址一直追踪到目标钱包。关注此事件比特币部分的链上调查人员可以在Mempool.space上监控整合活动，因为地址聚类往往能揭示攻击者的钱包基础设施。
以太坊（Ethereum）：以太坊的损失包括ETH以及受困钱包中持有的任何ERC-20代币。
波场（TRON）：波场托管着大量的USDT稳定币流通量，这意味着稳定币持仓可能占报道总额的重大比例，尽管目前尚未发布经过验证的详细分解数据。
This cross-chain theft is of great significance in obtaining evidence. An attacker who stole three chain assets at the same time either obtained a full set of mnemons that generated all chain keys, or deployed separate explosions in parallel. Hardware wallet attacks that affect multiple chains have become a recurring pattern, and as shown by the Coldcard incident, which reportedly affected more than 1000 Bitcoin addresses, peripheral vulnerabilities (such as supply chain tampering) can weaken even devices with a strong security reputation.
Recommendations for Ledger users
Before Ledger releases an official post-mortem analysis report, users holding Ledger's associated wallet assets should closely monitor their addresses for unauthorized outflows and avoid initiating new transactions until the attack vector is confirmed. If the vulnerability involves mnemonic extraction rather than a firmware vulnerability, transferring assets to a new wallet of new mnemonic words generated on uninfected devices is an appropriate response.
Ethereum users should also revoke any token authorizations granted to smart contracts, because damaged mnemons not only expose the ETH balance, but also expose any approved contract interactions. Wavefield users holding USDT should contact Tether directly if they suspect real-time risks, because Tether retains the ability to freeze specific USDT addresses in confirmed theft scenarios.
The $3 million XRP theft suffered by Ellipal wallet users provides a comparable case study showing how hardware wallet perimeter attacks have evolved from an initial intrusion to asset clearing across multiple networks. As of this writing, Ledger has not issued an official statement confirming the $92.9 million figure; readers should follow Ledger's official channels for verified updates.
