Ledger Investigates Estimated $93 Million Crypto Drain Linked to Reseller

Ledger is investigating a reported breach involving Southeast Asian reseller CryptoBilis after an estimated $93.2 million was drained from 315 wallets, raising security concerns for recent hardware-wallet buyers.

The losses spanned TRON, Bitcoin (BTC), Ethereum, BNB Chain, Polygon and Solana. About $70.5 million was taken from TRON wallets, followed by $16.8 million in Bitcoin, $3.7 million on Ethereum, $1.45 million on BNB Chain, $580,000 on Polygon and $250,000 on Solana.

The estimate was updated around 2 a.m. ET (06:00 UTC) Sunday after the main wallet drains began about 1 a.m. ET (05:00 UTC) Friday. Tether froze $10 million in USDT across 20 wallets, and $5.35 million in USDC was identified for possible freezing.

Ledger said investigators found an unauthorized implant in one affected device, while leaving its role in the wallet losses and the scope of any device compromise unresolved. Ledger asked CryptoBilis to pause sales and shipments.

CryptoBilis is listed as a Ledger reseller serving Indonesia, Malaysia and the Philippines. Ledger advised recent buyers not to initialize unused devices and urged active users to move funds to a new signer with a new recovery phrase.