Ledger Probes $86M Wallet Drain Linked to Southeast Asia Reseller CryptoBilis

Ledger is investigating a wave of wallet drains tied to devices bought from CryptoBilis, an official reseller across Indonesia, Malaysia, and the Philippines. Onchain researchers estimate the stolen funds could exceed $86 million across multiple chains right now.

What we know so far

The hardware wallet maker has asked CryptoBilis to halt all sales and shipments while it digs into the cause. Ledger also warned anyone who purchased a device from that reseller in the last 90 days: do not initialize it, and if you already have, move your assets to a fresh signer immediately. The losses span Bitcoin, Ethereum, and Tron.

Supply chain attack suspected

Blockchain analyst tanuki42 first flagged over $72 million flowing to a cluster of suspicious addresses. Specter later revised the figure above $86 million after tracing funds across three chains. Changpeng Zhao weighed in, saying the evidence points to a supply chain compromise — a small batch of tampered or counterfeit units slipping through one vendor. The exact number of compromised wallets remains unconfirmed.

Why this matters for every hardware wallet user

A hardware wallet is supposed to be the last line of defense. If a legitimate reseller can ship compromised devices, the trust model cracks. Verify your device on the manufacturer's official checker before you seed it, buy only from the maker's direct store when possible, and treat any unexpected "setup" prompt as a red flag. The $86 million question now is how many more tainted units are still in circulation.