Ledger confirms hardware tampering in CryptoBilis case, accompanied by $86 million in cryptocurrency

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

TLDR: Blockchain analysis estimates that $93.2 million was stolen from 315 wallets, Ledger releases security guidelines and reviews dealer controls

Ledger discovered the presence of an unauthorized hardware implant in a device during its associated CryptoBilis investigation. Blockchain investigators estimate cryptocurrency losses of more than $86 million, but Ledger has not confirmed the total amount.

Bitquery estimates that approximately $93.2 million was stolen from 315 wallets across five blockchain networks. As the investigation progresses, CryptoBilis has stopped selling hardware wallets so Ledger can review dealer controls and strengthen hardware security measures.

Ledger confirmed that an unauthorized hardware implant was found in a device related to the CryptoBilis incident, while blockchain investigators estimated that cryptocurrency losses exceeded $86 million.

The October 9 incident involved equipment sold through CryptoBilis, a distributor operating in Indonesia, Malaysia and the Philippines. Ledger pointed all confirmed cases to the dealer in an update dated October 11, while the investigation continues.

72-hour update on the dealer CryptoBilis incident:

As the investigation continues, we are working with relevant authorities. The number of affected equipment is limited. We know this is worrying, especially for users directly affected, and we are contacting them... -- Ledger (@Ledger) October 11, 2026

The company said its internal systems and direct sales channels were not affected. However, it was discovered that the tampered hardware introduced physical security issues, coupled with reported thefts, and investigators are still trying to determine the full scope of the incident. The number of equipment affected has not yet been announced, and the manufacturer has not confirmed a total financial loss. Meanwhile, CryptoBilis has stopped selling hardware wallets as the investigation proceeds with relevant authorities.

Blockchain analysis estimates $93.2 million was stolen from 315 wallets

Blockchain intelligence company Bitquery estimates that approximately $93.2 million was stolen from 315 wallets on Bitcoin, Ethereum, TRON, BNB Chain and Polygon. Its analysis also found that some stolen funds were transferred through additional addresses after the initial theft.

This estimate exceeds the individual report that puts suspected damage above US$86 million. However, neither figure represents an official damage assessment from Ledger, which has not yet confirmed the total stolen amount.

Reports of missing cryptocurrencies emerged on October 9, when users associated missing funds with wallets purchased through CryptoBilis. Investigators later found unauthorized hardware components in one of the affected devices.

Hardware wallets typically isolate private keys from Internet-connected devices to reduce exposure to online attacks. However, if malicious components compromise sensitive information, physical modifications can undermine these protections.

调查人员尚未公开说明受影响设备是如何被入侵的，或者硬件植入物是否导致了每一起报告的损失。因此，发现的组件与更广泛的盗窃之间的联系仍在调查中。