Skip to content
Ledger Investigates $86 Million Crypto Theft Linked to Reseller

Ledger Investigates $86 Million Crypto Theft Linked to Reseller

First seen 9 Oct 2026, 16:34 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 9, 2026 at 17:38 UTC
  • •Over $86 million in cryptocurrency reportedly stolen from Ledger wallets linked to CryptoBilis.
  • •Ledger has advised customers not to set up devices purchased from CryptoBilis in the last 90 days.
  • •The incident may involve counterfeit or tampered devices, indicating a potential supply chain attack.

Ledger is investigating reports of over $86 million in cryptocurrency stolen from wallets linked to devices sold by Southeast Asian reseller CryptoBilis. The company has requested CryptoBilis to halt all sales and shipments and advised customers who purchased devices in the last 90 days not to set them up. Users who have already initialized their devices are urged to transfer their assets to new wallets with fresh recovery phrases. The incident may involve a localized supply chain attack, with counterfeit or tampered devices being a possible cause. The exact number of affected users and the total losses are still unconfirmed. Notably, the stolen funds are associated with Bitcoin, Ethereum, and Tron addresses. Ledger continues to investigate the situation and will provide updates as more information becomes available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-09
Ledger announces investigation into theft
Ledger confirmed it is investigating a theft involving over $86 million in crypto linked to devices sold by CryptoBilis.
Coindesk
2026-10-09
CryptoBilis sales halted
Ledger requested CryptoBilis to pause all sales and shipments of Ledger devices pending investigation results.
Captainaltcoin
2026-10-09
CZ warns of supply chain attack risk
Binance's CZ warned that the incident appears limited to a supply chain issue involving a single supplier, CryptoBilis.
Kucoin

More articles in this cluster (4)

Following this threat?

Track CryptoBilis in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Who is affected by the theft?
Customers who purchased Ledger devices from CryptoBilis in the last 90 days may be affected.
What should I do if I bought a Ledger from CryptoBilis?
Do not initialize the device if you haven't done so, and consider transferring assets to a new wallet if you have already set it up.
Is there a confirmed cause of the theft?
The investigation is ongoing, but it may involve counterfeit or tampered devices linked to a supply chain attack.