Ledger 调查东南亚代理商损失，敦促用户审查资金

硬件钱包制造商Ledger调查东南亚经销商关联的加密货币损失事件

硬件钱包制造商Ledger表示，正在调查与其在东南亚地区经销商出售的设备相关的加密货币损失报告。该公司敦促近期购买者暂停使用受影响的产品，直至调查结束。

在X平台（原推特）发布的一则更新中，Ledger要求经销商CryptoBilis暂停进一步的销售和发货，作为预防措施。同时，Ledger警告在过去90天内购买该产品的客户不要初始化这些设备。对于已经初始化了疑似受损设备的用户，Ledger建议将资产转移到使用全新生成的助记词创建的新Ledger钱包中。

公司声明其自身的基础设施和服务未受到入侵，补充说明调查仍在进行中，尚未确认事件的起因和影响范围。

关键要点

• Ledger正在调查与从印度尼西亚、马来西亚和菲律宾的经销商CryptoBilis购买的设备相关的涉嫌损失。
• 过去90天内从该经销商购买的用户被指示不要初始化设备。
• 已设置设备的用户被建议将资金转移至新钱包，并生成新的恢复短语。
• Ledger表示未收到直接从公司购买设备的客户的报告，并强调其系统未被攻破。
• Although multiple researchers conducted independent on-chain investigations and produced higher total theft figures, Ledger has not confirmed any direct links other than dealer incidents.

Ledger warns recent CryptoBilis buyers

Ledger's statement on the X platform instructs that customers who have purchased hardware wallets from CryptoBilis in the past 90 days should avoid initializing these devices. For users who have completed initialization, Ledger recommends transferring their positions to a newly generated Ledger wallet and using a signature tool created with new mnemonics.

Ledger pointed out that CryptoBilis is listed as an authorized dealer in Indonesia, Malaysia and the Philippines. The company did not disclose the number of customers that might have been affected or the specific value of the loss, nor did it determine the cause of the incident, or whether the equipment had indeed been tampered with.

Crucially, Ledger emphasized that it had not received reports involving the purchase of cells directly from Ledger. The company added that the investigation is still ongoing and has not yet confirmed whether the alleged losses shared a single root cause.

On-chain researchers cite large suspected theft-but no confirmed contact

In addition to Ledger's warnings to dealers, on-chain researchers also reported suspected cryptocurrency theft cases involving multiple blockchain wallets. Researcher Tanuki42 identified eight wallet addresses allegedly linked to losses of more than $72 million. Another investigator, Specter, estimated that losses on Bitcoin, Ethereum and Tron could exceed $86 million.

Ledger has not confirmed the figures, and the extent of the connection between the stolen funds in these wallets and the purchase of Ledger equipment from CryptoBilis remains uncertain. The company said the incident appeared to be limited to dealers and the markets they affected, but did not provide evidence to directly link these broader on-chain estimates to hardware.

When asked if a connection had been confirmed, tanuki42 told Cointelegraph that he could not verify the connection with certainty. However, he said "no victim reports have been found that do not involve the dealer" and that "the existing victim reports are sufficient to convince that this is not a coincidence."

Security organizations call for incident response liaison

The Security Alliance (SEAL) amplified the tanuki42 findings on the X platform and urged anyone whose funds were moved to an identified address to contact its incident response team. SEAL did not provide an independent loss estimate or specify a reason for the suspected theft.

This call highlights a key uncertainty that investors and users should consider: While on-chain transfers can indicate fund flow patterns, in the absence of attribution of affected victims or equipment-level evidence, it is difficult to determine whether the theft mechanism is related to tampered hardware, compromised setup processes, or other factors.

The flow of funds caught the attention of Binance founders.

On Friday afternoon, on-chain analysis account Onchain Lens reported that wallets allegedly linked to suspected theft had transferred approximately US$270,000 in USDT and TRX to Binance. The report said most of the funds were then forwarded to Binance's hot wallet.

币安联合创始人赵长鹏（Changpeng Zhao）对此事发表评论，暗示可能涉及伪造或篡改的Ledger设备，并将其描述为可能的供应链攻击。赵在X上写道，他预计行业参与者将帮助追踪和追回资金。

Ledger尚未公开确认更广泛的供应链妥协理论。对于用户而言，最具可操作性的指导仍然是Ledger在设备层面的建议：停止使用受影响的产品，并将资产转移到使用全新助记词创建的新钱包中。

目前，关键的开放性问题包括：Ledger是否会确定具体的漏洞机制？损失是否与从CryptoBilis购买的设备精确对应？以及影响范围是否会超出经销商之外。通过经销商购买的用户应密切关注Ledger的更新，而任何关注链上报告的人都应等待能够将钱包活动转化为经过验证的设备或受害者案例细节的确认信息。