Ledger Probes Possible Wallet Tampering as Reports of an $86 Million Crypto Theft Spread

Hardware wallet maker Ledger said on Friday it is looking into reports of missing crypto tied to devices sold through CryptoBilis, a reseller in Southeast Asia. On-chain investigator Specter claimed that more than $86 million may have been drained from hundreds of wallets across Bitcoin, Ethereum and Tron after complaints from users on X and Blockto also report it. None of this has been independently verified, and it is still unclear whether the cases are connected or what caused them. Ledger has not confirmed the amount or the cause. As a precaution, it asked the reseller to pause all sales and shipments.

What Ledger Customers Should Do Now

Buyers who bought a device from the reseller in the past 90 days are told not to start setting it up. Anyone who has already activated a wallet should consider moving funds to a new Ledger device with a freshly generated recovery phrase. Ledger said it will share updates as the probe moves forward.

Supply-Chain Attack Theory and Crypto Hacks in 2026

One possible explanation is a supply-chain attack, where wallets are altered before reaching buyers, for example by supplying a device with a recovery phrase the attacker already knows. That would differ from a breach of Ledger’s own systems, and there is no confirmed evidence of either. The incident adds to a heavy year for crypto security, following Bitget’s loss of over $350 million last month, Liquid Network at about $320 million, Drift at $295 million and Kelp at $293 million, according to DefiLlama. Founded in 2014 and based in Paris, Ledger says it has sold over 7 million devices worldwide.