Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC 
ETH Key Facts
Hardware wallet maker Ledger is investigating an incident involving the loss of funds from customers in Southeast Asia who are believed to have purchased equipment from a dealer. Ledger has asked the dealer to suspend sales.
On-chain analyst Specter said that the amount of losses has exceeded US$86 million, with funds flowing across multiple networks such as Ethereum, TRON and Bitcoin, involving hundreds of wallet addresses.
Binance founder Zhao Changpeng pointed out that the existing evidence points to a supply chain attack against a certain supplier, but Ledger has not yet officially confirmed this.
Incident Details and Official Response
Ledger issued a statement on Friday saying it was investigating financial losses related to purchasing products from its designated distributor, CryptoBilis. Ledger has asked the company to suspend all sales and shipping operations as a precautionary measure.
Ledger recommends that customers who have purchased equipment from this dealer within the past 90 days do not initiate the setup process if they have not yet activated the equipment; for users who have already activated, we recommend transferring assets to new Ledger equipment (and generating new mnemons).
As of now, Ledger has not disclosed the specific way in which funds were stolen.
Scale of loss and expert opinions
在 Ledger 发布声明前数小时，X（原 Twitter）和 Reddit 平台上开始出现多起用户报告，称其钱包资金被清空。一位用户在帖子中写道，其钱包在“未签署任何交易”的情况下被清空，而其手写恢复短语一直妥善保管在保险箱中。
链上分析师 Specter 追踪了被盗资金的地址，估算总损失超过 8600 万美元，涉及以太坊、波场和比特币等主要区块链网络。Ledger 方面尚未确认具体的损失总额。
币安创始人赵长鹏表示，这似乎是一次针对单一供应商的本地化供应链攻击，“可能只有少数人购买了假冒或篡改过的 Ledger 设备”。他在随后的另一篇帖子中建议，新用户应将新购买的硬件钱包放置几周后再进行资金存入操作。他提醒道：“自我托管（Self-custody）伴随着额外的责任。”
什么是硬件钱包的供应链攻击？
Ledger 官网将供应链攻击描述为黑客通过入侵受信任的第三方提供商来获取最终目标访问权限的攻击方式，而非直接攻击目标本身。
应用于硬件钱包场景时，这意味着在出厂到买家手中的环节出现了干预，例如设备被篡改，或者设备内预置了攻击者已掌握的助记词，而非制造商代码存在漏洞。
今年，硬件钱包的第三方供应商和经销商因多起安全事件备受瞩目：8 月份，ShipMonk 发生数据泄露，导致 Trezor 客户数据面临钓鱼风险；另一起 breach 则暴露了近 40,000 名 SafePal 用户的订单记录。
