Southeast Asia Reseller at Center Stage
Hardware wallet manufacturer Ledger is facing scrutiny after reports surfaced that users in Southeast Asia lost tens of millions of dollars in cryptocurrency.
Ledger responded by asking CryptoBilis to immediately pause all sales and shipments while an investigation is underway. The company has not confirmed the exact number of victims or the total value stolen, but multiple blockchain researchers have traced losses potentially exceeding $86 million across Bitcoin, Ethereum, and Tron networks.
Ledger Urges Halt on Device Setups
In response to the unfolding situation, Ledger issued a warning to customers who bought their devices from CryptoBilis within the last 90 days: do not set up your wallet. For those who have already activated their hardware wallets using these devices, Ledger strongly recommended moving assets to a new device and generating a fresh recovery phrase—a unique series of words used to restore access to funds.
The company emphasized that its own infrastructure and services remain uncompromised, and no similar incidents have been reported by users who bought directly from Ledger’s official channels.
Blockchain Sleuths Trace Stolen Millions
The scale of the theft has been pieced together by independent blockchain investigators. A pseudonymous researcher known as Specter reported tracing suspicious activity involving hundreds of victim wallets across three major blockchains: Bitcoin, Ethereum, and Tron. Specter estimated the total losses at more than $86 million—a figure echoed by another onchain analyst, tanuki42, who identified eight wallet addresses allegedly tied to over $72 million in stolen funds.
However, these numbers remain unverified by Ledger itself. The company has not disclosed how many customers are affected or provided an official loss tally. This gap between investigator estimates and company statements creates uncertainty for both users and industry observers.
It’s unclear whether all reported incidents stem from a single vulnerability or if multiple factors are at play within this reseller channel.
See Also
$86 Million Figure Remains Unverified
While headlines point to losses surpassing $86 million, the context is messier: Specter’s analysis puts the total above this mark, yet Ledger has stopped short of confirming any specific sum or even identifying a root cause. The only clear pattern so far is that affected wallets were linked to devices sold via CryptoBilis within a 90-day window.
As coindesk.com reports, Ledger has asked anyone with a recently purchased device from CryptoBilis not to begin setup and urged those already using such wallets to transfer assets immediately. Despite these warnings, some users may not yet be aware their funds are at risk—a situation made more urgent by ongoing social media reports on X (formerly Twitter) and Reddit.
No evidence has emerged suggesting Ledger’s manufacturing process or direct sales channels were compromised during this episode.
Why It Matters
For everyday crypto holders relying on hardware wallets for security, this incident underscores a practical risk: even trusted brands like Ledger can be undermined by vulnerabilities introduced through third-party resellers. With losses estimated at over $86 million but still unconfirmed by the company itself, users face difficult decisions about where—and how—to store their digital assets safely.
The tension between convenience and security is sharper than ever; buying from authorized resellers may seem safe on paper, but this case highlights the potential dangers when supply chain integrity is breached or tampered with before reaching end-users.
Critical Points
- •Blockchain investigator Specter estimated over $86 million stolen from hundreds of wallets linked to Ledger devices sold via CryptoBilis in Southeast Asia.
- •Ledger advised customers who bought from CryptoBilis within the past 90 days not to set up devices and to move assets if already activated.
- •Ledger asked CryptoBilis, an authorized reseller in Indonesia, Malaysia, and the Philippines, to pause all sales and shipments during the investigation.
What remains to be seen
It remains unclear whether Ledger’s ongoing investigation will confirm the estimated $86 million in losses reported by Specter and others, or identify the specific cause and number of affected users tied to CryptoBilis sales in Southeast Asia; if Ledger discloses verified figures or a root cause in its next update, the immediate scope of the incident will become known.
