Skip to content
Tampered Ledger Wallets Lead to $2.7M Loss for Singapore Users

Tampered Ledger Wallets Lead to $2.7M Loss for Singapore Users

First seen 29 Oct 2026, 04:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 29, 2026 at 09:38 UTC
  • •Tampered Ledger wallets have caused $2.7 million in losses for Singapore users.
  • •Unauthorized hardware implants captured sensitive data during wallet setup.
  • •Ledger has halted sales from affected resellers while investigations continue.

In October 2026, reports emerged of drained wallets linked to Ledger devices purchased from CryptoBilis, a Southeast Asia reseller. Singapore police revealed that at least two cases of tampered Ledger wallets were reported as early as September 10, resulting in losses of approximately 3.5 million Singapore dollars ($2.7 million). The tampering involved unauthorized hardware implants that captured sensitive data during wallet setup. Ledger confirmed that these compromised devices were sold through various retail outlets in Southeast Asia, prompting an investigation and a halt on sales from affected resellers. Users who set up wallets from CryptoBilis are at the highest risk, while Ledger's own stock remains unaffected. As of October 28, 2026, Ledger continues to investigate the supply chain issue and has advised users on protective measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-10
First reports of tampered Ledger wallets
Singapore police received reports of tampered devices leading to significant financial losses.
Cointelegraph
2026-10-09
Wider incident becomes public
Reports surfaced about drained wallets linked to Ledger devices sold through CryptoBilis.
Stealthex
2026-10-13
Ledger halts sales from affected resellers
Ledger requested resellers in Southeast Asia and Hong Kong to stop selling devices while investigations were ongoing.
Cointelegraph
2026-10-28
Ledger confirms ongoing investigations
Ledger continues to investigate the supply chain issues and has provided guidance for affected users.
Stealthex

More articles in this cluster (4)

Following this threat?

Track Challenger in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 3

Common questions

Who is affected by the tampering?
Users who purchased Ledger wallets from CryptoBilis and completed the setup process are at the highest risk.
What should I do if I bought a Ledger from CryptoBilis?
If unused, do not set it up; if already set up, stop using the recovery phrase and transfer funds to a new wallet.
Is Ledger itself compromised?
No, Ledger's own stock has been verified as clean, and the issue is related to third-party resellers.