Ledger has asked Southeast Asian reseller CryptoBilis to stop selling and shipping its hardware wallets while the manufacturer investigates reports of customer losses.
The company advised anyone who bought a Ledger device from CryptoBilis during the past 90 days not to initialize it. Customers who already set up a device were urged to move assets to a new signer protected by a freshly generated seed phrase, Ledger’s support statement reported by Decrypt said.
A pseudonymous investigator using the name Specter traced more than $86 million of suspected thefts across Bitcoin, Ethereum and Tron addresses associated with victim reports. Ledger has not confirmed that total, the number of affected users or the attack method.
The investigation centers on the supply chain, not a confirmed breach of Ledger’s core hardware or software. A device can be dangerous if it arrives preconfigured, includes a recovery phrase supplied by a third party or has been physically altered. Ledger has not established that any of those scenarios occurred here.
TOKEN RECON ASSESSMENT
The protective action is specific and urgent even though attribution remains incomplete. CryptoBilis buyers should treat every existing seed phrase as potentially exposed. The incident becomes a confirmed supply-chain compromise only if device examinations, reseller records or forensic links establish how the keys were obtained.
