Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain — SkimNews
Get the Finance newsletter
Daily finance — markets, central banks, M&A, the prints that move money. Free.
- Ledger asked resellers and distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales and take devices off shelves while it investigates tampered hardware wallets.
- Ledger said all confirmed losses involve devices sold through CryptoBilis, a regional reseller, and it has no evidence its own infrastructure, systems, or direct sales channel were compromised.
- The implant reads the 24-word recovery phrase from the device's screen during setup and transmits it over LTE, according to Ledger's Donjon security team.
- Onchain investigator Specter has traced more than $86 million in suspected thefts, a figure Ledger says it has not independently verified.
- MediaMarkt Saturn stopped selling Ledger devices in its stores and online, with Ledger's agreement, after a customer in Germany reported an implant — though no funds were lost in that case.
- Rival wallet maker Trezor said it will end its reseller authorizations on January 1, 2027, calling the move a "precautionary measure" despite no evidence its own devices were compromised.
Why it matters: Rival Trezor will pull its reseller authorizations by January 1, 2027 — showing the breach has triggered industry-level supply chain scrutiny beyond Ledger, and the $86 million traced so far flowed through devices compromised via a single regional reseller.
Ask SkimNews
