8600万美元疑似加密货币被盗后，对Ledger钱包黑客攻击的调查加剧

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

关键洞察

Ledger钱包遭黑客攻击事件涉及超过8600万美元的疑似损失，受影响的是从CryptoBilis购买设备的东南亚用户。链上数据显示资金在比特币、以太坊和波场网络上被转移，促使Ledger要求该经销商停止销售和发货。

Ledger建议在过去90天内从CryptoBilis购买设备的客户避免进行初始化设置；如果已经初始化，请使用新的助记词将资金转移到新的Ledger设备中。

Ledger钱包黑客入侵调查聚焦单一经销商

Ledger钱包黑客入侵调查始于2026年10月9日，此前有报道称超过8600万美元的加密货币被盗。Ledger已要求东南亚经销商CryptoBilis在调查期间暂停设备的销售和发货。

区块链调查员Specter追踪了与比特币、以太坊和TRON网络上的数百个钱包相关的资金。截至目前，Ledger尚未独立确认总损失金额，也未确定资金是如何被转移的。

在社交媒体平台X上发布的一篇帖子中，Ledger支持团队宣布，在公司调查客户资金涉嫌丢失一事期间，已要求CryptoBilis停止其设备的销售和发货。

通知指出，该建议适用于过去90天内从该经销商购买Ledger产品的买家。建议那些购买了CryptoBilis设备但尚未初始化的用户不要进行初始化操作。

Ledger钱包黑客入侵焦点 | 来源：X

对于那些已经初始化设备的用户，建议将其Ledger设备上的资产转移到带有新恢复助记词的新Ledger设备上。该通知并未说明涉嫌的加密货币盗窃是如何发生的，也没有确认设备存在安全漏洞是造成损失的原因。

目前的Ledger安全漏洞报告均指向可能与特定分销商有关的问题。如果问题仅限于供应链环节，其影响将与波及所有Ledger设备的情况截然不同。

Ledger加密货币盗窃数据揭示了什么

区块链调查员Specter估计损失超过8600万美元，影响了比特币、以太坊和TRON网络上的数百个钱包。

然而，这些数据仅是独立调查员的估算，并不代表Ledger官方承认的数字，也不是对客户损失的正式统计。

Ledger钱包加密货币盗窃 | 来源：X

目前尚不清楚此次报告的加密货币钱包安全漏洞是由于恢复助记词泄露、设备被篡改、恶意软件还是其他因素导致的。

硬件钱包通过将私钥离线存储来降低在线威胁的风险。然而，其安全性也取决于设备的完整性以及恢复助记词的存储安全性。

在调查人员查明攻击方法之前，断定所有Ledger产品普遍存在安全隐患为时尚早。

为何CryptoBilis购买的Ledger用户收到警告？

As mentioned earlier, Ledger's notices do not apply to all Ledger buyers, only to users who have purchased Ledger equipment from CryptoBilis within the past 90 days. Any user who has purchased Ledger products from this Southeast Asian distributor within the past 90 days should take the measures described in the company notice.

Specifically, users who have purchased Ledger products from CryptoBilis within the past 90 days but have not yet initialized their devices are not allowed to initialize until further notice. Users who have initialized their devices during this period are recommended to transfer assets to new devices with new recovery mnemons.

It is crucial to use new recovery mnemonics. If funds are transferred to new equipment with the same (possibly damaged) mnemonic, assets will still be at risk. Customers should also obtain more information and guidance through Ledger's official support channels and should not provide recovery mnemons to unsolicited third parties.

The Ledger Wallet Hacking Investigation did not provide evidence that all cryptocurrency wallet security devices purchased from CryptoBilis had been compromised. Instead, the notice applies only to customers who purchased Ledger equipment from that particular dealer during the investigation period.

Broader issues of cryptographic security

The Coin Republic reported on August 13 that Trump signed an executive order on cybercrime because cryptocurrency theft accounted for one-third of total losses. This occurs against the backdrop of setbacks in the general network security industry and the encryption industry as a whole.

The article pointed out that according to U.S. government data, losses caused by cybercrime in 2025 will exceed US$20.8 billion. According to Bitget CEO Gracy Chen reported on October 2, limited recovery of funds is expected after a cyber attack in which approximately $387.5 million in assets were stolen.

Although approximately US$1.1 million in funds has been frozen, the frozen funds do not necessarily belong to the company and may not be returned. Cryptocurrency fraud and theft cases of all sizes often make headlines, but individual cases often have complexity in determining the attack methods, tracking and recovering funds.

The Coin Republic reported on September 25 that 3,832 NFTs from hundreds of wallets were diverted in an alleged security breach in Magic Eden. As the matter is still under investigation, funds have been locked up by white-hat participants.

Ledger's security investigation must first determine how the $86 million suspected loss occurred. Only on this basis can investigators determine whether there is a device vulnerability.