Back Straitstimes

Ledger suspends South-east Asia sales over tampered wallets

Straitstimes • October 14, 2026

The sales suspension covers Singapore, Malaysia, Indonesia, Thailand, the Philippines, Vietnam and Hong Kong.

SINGAPORE – Paris-based cryptocurrency hardware wallet maker Ledger has suspended sales across South-east Asia after discovering that some of its devices had been tampered with to steal user funds.

Following an Oct 9 incident in which wallet owners reported stolen cryptocurrency, Ledger announced on Oct 13 that it is also asking regional resellers and distributors to pull the hardware wallets from their shelves.

A hardware wallet is a physical device that stores private keys offline, making them more secure than storing the keys online, where they are vulnerable to hacking.

The manufacturer is investigating devices sold by Malaysian reseller CryptoBilis, which were found to contain malicious implants.

These implants can read information on the wallet’s screen, and when users key in a 24-word recovery phrase to access their cryptocurrencies, the information is relayed to a third party.

According to blockchain analysts, losses are estimated at more than US$86 million (S$110 million), although Ledger said it could not confirm the number of people affected or the total amount lost.

The manufacturer added that the losses were confined to South-east Asia.

The sales suspension covers Singapore, Malaysia, Indonesia, Thailand, the Philippines, Vietnam and Hong Kong.

In Singapore, a tampered device was found to have been sold at Metapod at Changi Airport.

Another was reportedly bought from a Challenger outlet at VivoCity.

The Straits Times has contacted Metapod, Challenger and Ledger for more information.

Separately, European electronics retailer MediaMarktSaturn has pulled Ledger’s products from its shelves across the 11 markets where it operates, after a customer in Germany reported an implant in a device.

According to Ledger’s website, its products are manufactured and assembled in France, Hungary and Vietnam, then shipped to retailers and customers from its warehouse in Vierzon, France, or its distribution centre in Memphis, Tennessee, in the US.

Wireless networks and devices

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Exploits Target WordPress and SonicWall; Ledger Wallets Compromised Two critical vulnerabilities, CVE-2026-85097 and CVE-2026-102255, are under active exploitation, affecting the WordPress Bricksforge plugin and SonicWall SMA 1000 appliances, respectively. The Bricksforge plugin allows unauthenticated remote code execution, while the SonicWall flaw enables server-side request forgery attacks. Additionally, Ledger has confirmed that some of its hardware wallets, sold through the reseller CryptoBilis in Southeast Asia, were tampered with to steal cryptocurrency, leading to estimated losses of over $90 million. Ledger has suspended sales in Southeast Asia and is investigating the extent of the tampering. The incidents highlight significant vulnerabilities in both software and hardware security, prompting urgent responses from affected companies. 4 sources 73

Extracted Entities

Ledger suspends South-east Asia sales over tampered wallets

The full story

Extracted Entities

Attack Types (1)

Countries (9)

MITRE ATT&CK (2)