WuBlockchain
Ledger is investigating reports of stolen funds involving Southeast Asian customers who bought devices from reseller CryptoBilis. The company asked the reseller to pause sales and shipments and warned customers who bought devices there within the past 90 days not to initialize them.
Why it matters
Ledger advised customers who already initialized a device to move assets to a new Ledger signer with a new seed phrase. Onchain investigator Specter said suspicious addresses received funds from hundreds of victim wallets across Ethereum, TRON and Bitcoin, with losses estimated above $86 million.
Market impact
The common attack vector has not been confirmed. Ledger said there is currently no evidence its hardware wallets or core infrastructure were directly compromised. CZ said available information points to a localized supply-chain attack involving one vendor and possibly fake or tampered devices. He added that BNB ecosystem participants and the broader industry would help trace and recover the funds.
Frequently asked questions
-
What did Ledger advise customers who bought from CryptoBilis within the past 90 days?
Ledger advised them not to initialize their devices. Customers who had already set them up were told to move assets to a new Ledger signer using a new seed phrase.
-
How much money has the theft been estimated to involve?
Onchain investigator Specter estimated losses above $86 million, tracing suspicious addresses that received funds from hundreds of victim wallets.
-
Which networks were linked to the suspicious addresses?
Specter said the addresses received funds from victim wallets across Ethereum, TRON and Bitcoin.
-
Has investigators confirmed how the wallets were drained?
No. The common attack vector has not been confirmed. CZ said available information points to a localized supply-chain attack involving a single vendor.
-
Is there evidence Ledger's hardware or core infrastructure was compromised?
Ledger said there is currently no evidence that its hardware wallets or core infrastructure were directly compromised.
WatcherGuru
TheBlock
CoinDesk
CryptoSlate
CoinTelegraph
Lookonchain
Crypto Rank News