# Ledger Says Wallet Drains Appear Limited to CryptoBilis-Sold Devices

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/29918
Published: 2026-10-11T21:19:29.000Z
Updated: 2026-10-11T21:19:29.000Z
Section: Technology

> The company confirmed an unauthorized hardware implant in one affected device as blockchain analysis put losses at $93.2 million across 315 wallets.

Ledger said the cryptocurrency wallet drains under investigation appear limited to devices sold through Southeast Asian reseller CryptoBilis, narrowing the suspected scope of an incident that has affected hundreds of wallets.

“Based on the information available so far, we believe the funds drained are limited to devices sold through a reseller named CryptoBilis in South East Asia,” Ledger Support said.

Blockchain analysis counted $93.2 million taken from 315 wallets across TRON, Bitcoin (BTC), the Ethereum network, Solana, BNB Chain and Polygon, using asset prices from Oct. 9. Tether froze $10 million in USDT.

Ledger also confirmed that one affected customer’s device contained an “unauthorized hardware implant.” The company has not established that the same modification caused every reported theft.

Ledger asked CryptoBilis to stop sales and shipments while its investigation continues. The company has not disclosed how many devices were affected or confirmed a final total for the stolen assets.

The blockchain activity showed coordinated transfers across multiple networks, but it does not establish how the attackers obtained recovery keys. Ledger hardware wallets are designed to protect those keys, which can be used to move cryptocurrency from linked wallets.
