#LedgerResellerSecurity
About LedgerResellerSecurity
Ledger says confirmed theft cases so far involve devices sold by Southeast Asian reseller CryptoBilis, with few devices affected. It confirmed an unauthorized implant in one device and says its systems and direct sales show no signs of compromise. Researchers estimate over $86M in suspected losses, but the total and any link to the implant remain unverified. A European buyer also reported a suspicious component in a reseller device; this claim is unverified. Is the risk confined to one channel?
Nejžhavější
Nejnovější
LedgerResellerSecurity Oblíbené příspěvky
#Ledger Investigation Update: The Theft Is Temporarily Concentrated in a Single Channel
The boss has something to say
The latest update on the Ledger investigation is out. The theft cases are concentrated at the Southeast Asian distributor CryptoBilis; no breaches have been found in the official direct sales channels. However, a European user reported that devices bought from a local authorized dealer also contained suspicious components.
money from the ledger wallet drains, which hit buyers from reseller cryptobilis, now reaches binance. on october 10 the attacker swapped 5.1m usdd back to usdt and paid five otc brokers. those brokers sent 5.2m usdt to three binance addresses. binance records can identify the accounts, but binance freezes funds only with a police or court order. the brokers also serve other clients, so the stolen share is unknown.
AN UNINVITED GUEST INSIDE A COLD WALLET.
Ledger confirmed an unauthorized hardware implant in one affected customer’s device.
It’s investigating reported losses among CryptoBilis buyers in Southeast Asia. On-chain analysts estimate over $86M stolen; Ledger has not confirmed the figure or cause.
Bought there in the past 90 days? Ledger advises against setting up unused devices.
A security breach may begin long before the first transaction.
#LedgerResellerProbe
A hardware wallet is only one part of crypto security.
Ledger is investigating reported losses involving devices purchased through a Southeast Asian reseller. The cause and full scale of the incident have not been confirmed.
The lesson is bigger than any single brand: where you buy a device, how you verify it, and how you protect your recovery phrase all matter.
Never share your seed phrase with anyone.
Do you buy hardware wallets directly from manufacturers or through resellers?
they didn’t hack ledger. they didn’t exploit the code. they BOUGHT the company selling you the device. $86 million gone
a company called CryptoBilis was an authorized ledger reseller in southeast asia. trusted. legit. sold ledgers for years
a random chinese company quietly bought CryptoBilis from its malaysian owner
made the original owner sign a confidentiality agreement. he couldn’t tell anyone the company was sold
same brand name. same website. same “authorized reseller” badge. but different people behind it now
the new owners started opening every ledger device before shipping
soldered a tiny spy chip onto the board inside. repackaged it. sealed the box. shipped it
the device looked normal. felt normal. worked normal
but the spy chip was silently capturing your private keys the moment you set it up
your seed phrase was sent to the attacker before you even finished writing it down
hundreds of wallets across ethereum tron and bitcoin. all drained
the guy who lost $5.3 million said “i did everything right. no leverage. no memecoins. i stored my funds on a hardware wallet like we’re all told to”
he was right. he did everything right
except his device had a parasite inside it that he couldn’t see
ledger has now told CryptoBilis to stop all sales. told recent buyers NOT to set up their devices
mark karpelès posted photos of the implant. normal board on top. spy chip below
the most dangerous attack in crypto this year wasn’t a line of code
it was a business acquisition
Key News
· 10/10 Crash Anniversary: One year after 70B before the crash to ~$30B by mid-December 2025.
· Ledger Security Fallout: A suspected Ledger reseller hack saw 93.4M in crypto stolen. Hardware wallet manufacturer Ledger launched an investigation; reseller CryptoBilis suspended all sales in Malaysia, Philippines, and Indonesia.
· Hacker Shorts $BTC with 40x Leverage: A wallet received 263 ETH from Tornado Cash, sold it for $643K USDC, and deposited into Hyperliquid to short 305.5
Hashmeta_x
Crypto markets are showing a modest rebound today, with $BTC holding above $82,500 after a brutal week of liquidations. The Fear & Greed Index climbed back to 64 (Greed) from 59 yesterday, signaling sentiment is recovering, though Treasury yields near 5.25% continue to cap upside.
Community note is lying and using “ledger” as an authority on the topic.
Ledger “stating” the issue is limited to devices from the cryptobilis reseller is incorrect.
-We’ve seen multiple cases globally.
They cannot possibly know if more regions are compromised.
My post even quotes ones found in Europe. Complete PR lie misleading the severity of the hack.
The fact is ledger devices are compromised and we have no way to tell how long or how far this attack has been ongoing.
Crypto Bitlord
WARNING ⚠️ GET FUNDS OFF LEDGER ASAP ⚠️
I suspect an entire global sleeper operation is ready to drain on their switch.
If you think these hackers just cracked one single ledger reseller you’re beyond delusional.
They would have had runners loading these things across the world. Getting them in wherever they can.
Even possible insider employees swapping out legitimate Ledger devices sold at real stores.
There is simply no way to tell how big this is. No way to know how far they went or how long they’ve been doing this…
You could be using an infected device.
Consider ledger compromised. Don’t risk it.
🚨Get funds out now🚨
Warn others.
🇫🇷🇨🇳🇲🇾 Around $90 million is gone from bugged Ledger wallets, and the reseller that sold them had a new owner nobody was allowed to talk about.
Some of the wallets, sold through CryptoBilis, Ledger's authorized reseller for Indonesia, Malaysia and the Philippines, had a tiny implant hidden behind the screen.
It grabs the recovery phrase during setup and beams it out over a cellular connection.
The devices still pass Ledger's own authenticity check because the original security chip is left untouched.
Ledger has confirmed the implant in at least one device.
CryptoBilis was sold in March, and by August, 100% of its shares belonged to a single individual with an address in China's Heilongjiang province.
The original co-founders say they walked away from the business after the sale, and confidentiality terms kept them from announcing it.
Nobody has linked the mystery owner officially to the implants yet, and Ledger is staying quiet on the ownership change.
That's a big silence for a company whose whole pitch is "don't trust, verify."
Ledger hasn't said whether it knew its authorized reseller for 3 countries had been secretly sold to an unknown buyer, and either answer looks bad for a brand that sells trust for a living.
Its line so far is that only a "limited" number of devices were hit and its own systems are safe.
Posts are also circulating claiming a tampered device turned up in Europe, allegedly bought at MediaMarkt, but Ledger hasn't confirmed any cases outside CryptoBilis.
Between this and the Magic Eden exploit that saw thousands of NFTs stolen from wallets just weeks ago, it's been a rough month for holders.
Turns out cold storage doesn't help much when the wallet phones home.
Sources: Ledger, The Verge, Bloomberg, Gizmodo, Bitcoin News, BitPinas, eGamers / Writer: Julie
