# Ledger Theft Tops $93 Million After Weeks of Wallet Preparation

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/29682
Published: 2026-10-11T02:29:11.000Z
Updated: 2026-10-11T02:29:11.000Z
Section: Technology

> Funds moved from 471 addresses across seven blockchains, while Ledger investigates devices sold through distributor CryptoBilis.

Ledger-linked wallets lost about $93.4 million across seven blockchains after attackers spent weeks testing transfers, approvals and automated fund movements, intensifying concerns about a possible supply-chain compromise.

The losses affected 471 addresses, with most of the activity occurring Oct. 9. Tron-based wallets accounted for about $69.98 million in USDT losses, while Bitcoin-related losses reached $17.59 million. The affected wallets ranged from several days old to more than five years old.

Ledger is investigating users in Southeast Asia who bought devices through CryptoBilis and has told the distributor to halt Ledger sales and shipments. Users who bought a device from the distributor in the past 90 days and have not initialized it were told not to set it up. Those who already initialized a device were told to move assets to a new device using a newly created recovery phrase.

More than $3 million in Ether was transferred to Tornado Cash, while Tether froze $10 million in USDT. About $14.6 million in USDD could not be frozen.

Mark Karpelès said he found an unauthorized cellular module in a Ledger device purchased in Malaysia that appeared capable of monitoring screen data, but the finding has not been tied directly to the theft. CryptoBilis also changed ownership earlier this year, and its former CEO said he no longer had access to company systems. The distributor said it expects to provide an update within three business days.