Company
Southeast Asian authorized reseller of Ledger hardware wallets.
Security researcher Taylor Monahan says most fresh Ledger loss reports trace to owners who handed recovery phrases to scammers. Estimates of the episode's losses run $70 million to $100 million, and Ledger says every verified case traces to one reseller.
Reality
Researcher Joe Grand says he told Ledger of an implanted Nano X on March 4, 219 days before the Oct. 9 CryptoBilis wallet losses. The case that Ledger gave no public warning rests on Grand's criticism and Mark Karpelès saying he has seen none.
Reality
Bitquery estimates $102 million was drained from 324 Ledger-linked wallets on six chains, up from about $86 million earlier. Ledger says its chips, software and servers were not breached and calls it a distribution-channel attack.
Perspective Coverage
6 publishersReality
Ledger plans to release its Android-based Atom wallet in mid-2027, after a breach that onchain researchers put at up to $93.2 million. It plans no trade-ins for customers hit by the tampering, so victims who want the new hardware will pay for it.
Perspective Coverage
11 publishersReality
Ledger disclosed on October 13 that an implant in a signer sold by CryptoBilis captures 24-word recovery phrases and sends them over LTE. Every fund loss Ledger has verified involved devices bought through that reseller.
Perspective Coverage
8 publishersReality
Ledger confirmed on Oct. 10 that one affected customer's wallet held an unauthorized implant, after drains that trackers put near $93 million. That proves tampered hardware reached a victim, but investigators have not tied comparable equipment to the rest of the losses.
Perspective Coverage
22 publishersReality
Ledger suspended reseller sales in seven Asian markets and barred resale of returned wallets after implants captured recovery phrases. Independent blockchain investigators estimate losses above $86 million, a figure Ledger has not verified.
Reality
Ethena CEO Guy Young says a large ENA holder's transfers were a security precaution after the Ledger attack. Researchers put the thefts at up to $93.2 million, and every holder who moves to a fresh signer leaves a trail that looks like an exit.
Reality
MediaMarktSaturn removed all Ledger products from its stores and online platforms over tampering reports. The public German evidence is an X user's claim that two wallets held cellular modules. Ledger did not answer Cointelegraph on whether it has confirmed any tampered device in Europe.
Perspective Coverage
6 publishersReality
Ledger asked resellers in seven Asian markets to pull its wallets from shelves on October 14. It has not tied a suspected implant in a Flex from a second reseller to the first cases, so how far the tampering reaches is open.
Perspective Coverage
7 publishersReality
Trezor will end its resellers' authorization on January 1, 2027, days after Ledger found an LTE spy implant in wallets sold by CryptoBilis. Trezor says there is no evidence its own devices were compromised.
Perspective Coverage
7 publishersReality
Ledger told owners of Nano X wallets bought from CryptoBilis to discard them after spy chips were linked to more than $86 million in thefts. A Nano X bought in Europe and a Ledger Flex have since been reported with the same implant.
Reality
X users say tampered Ledger wallets also came from MediaMarkt in Germany and LazMall in the Philippines, beyond the CryptoBilis batch Ledger confirmed. Karpelès has examined pictures of the LazMall unit; the MediaMarkt claim rests on one account.
Reality
On-chain analyst Specter traced more than $86 million drained from hundreds of Ledger hardware-wallet users across Ethereum, TRON and Bitcoin. With the cause unconfirmed, holders cannot yet tell whether moving coins to a new device would help at all.
Perspective Coverage
10 publishersReality
Researcher @0xJohannes_ says a second Ledger bought at a different MediaMarkt store has the same hidden cables and LTE module as his first. His account does not show where the tampering happened, so the Aqipa link names a supplier and locates no fault.
Reality
Bitcoin users moving to multivendor multisig after Coldcard and Ledger face a $285 device bill at the lowest listed prices, against $59 for one wallet. Wallet makers and services like Casa and Unchained could gain customers, news.bitcoin.com reported, but the cost may push some users to custodians.
Reality
OneKey has revoked reseller CryptoBilis and will replace for free every OneKey wallet bought there since March 1. Ledger confirmed an implant in one device from that reseller. Most makers of the other brands it sold have not said whether they are affected.
Perspective Coverage
3 publishersReality
User @0xJohannes_ says the Ledger he bought at MediaMarkt holds extra internal wiring, a European report after a $93.4 million drain in Asia. Ledger says all confirmed cases came through CryptoBilis, so a compromised European retail channel is unproven.
Reality
Ledger said in its October 11 update that every confirmed case in the October 9 draining incident involved devices sold by CryptoBilis. It has not tied a researcher's possibly implanted European device to that investigation.
Reality
X user Johannes says his MediaMarkt Ledger holds an early version of the implant tied to an estimated $93.4 million in Asian losses. Ledger has not confirmed the link or the estimate, so retail buyers have no official answer on provenance.
Reality