A hardware wallet is supposed to be the place where your crypto is finally safe. The private keys never leave the Secure Element, the device asks you to confirm every transaction on a screen you trust, and the whole point of paying for a dedicated gadget is to remove the risk that comes with exchanges and browser extensions. That promise is exactly why the supply-chain scare now engulfing Ledger and its Southeast Asian reseller CryptoBilis hits so hard: the suspected thefts now approaching 90 million USD did not come from broken cryptography or a clever exploit. They came, investigators believe, from devices that were physically tampered with before they ever reached the customer.
Here is what we know so far. On October 9, Ledger said it was investigating reports of customers losing funds after buying devices through CryptoBilis, an authorized reseller listed in Ledger’s official directory for Malaysia, Indonesia and the Philippines. Ledger asked the distributor to pause all sales and shipments immediately. Customers who bought a device from CryptoBilis in the previous 90 days were told not to initialize it, and those who had already set one up were urged to move their funds to a fresh device with a new recovery phrase. In the days that followed, teardowns of suspect devices found what researchers describe as unauthorized hardware implants — including, according to multiple reports, a spy chip capable of transmitting recovery phrases. Retailers pulled Ledger devices from shelves in at least seven Asian markets, and the freeze extended as far as MediaMarkt in Europe.
### The numbers behind the scare
On-chain investigator Specter traced inflows from hundreds of suspected victim wallets into clustered addresses across Bitcoin, Ethereum and Tron, initially estimating losses above 86 million USD. Blockchain security firm MistTrack later put the figure closer to 90 million USD. Those estimates are not independently verified, and nobody has confirmed exactly how many devices were compromised or whether every traced wallet belongs to the same operation. But the pattern was consistent enough that Tether moved to freeze USDT linked to the incident — a meaningful intervention, since frozen addresses cannot move their tokens through ordinary transactions while investigators work.
The freeze also exposes the limits of on-chain justice. Tether can restrict its own stablecoin, but it cannot freeze native Bitcoin or Ethereum. Any recovery beyond USDT depends on exchanges, custodians and law enforcement catching the funds as they surface in identifiable services, and a freeze alone does not return anything to victims. MistTrack has not disclosed the value of the restricted tokens, so there is no honest way to say what share of the 90 million USD might eventually come back.
### Why the hack worked
The most uncomfortable detail in this story is that Ledger’s own Genuine Check was never designed to catch this. The company’s security documentation acknowledges that the authentication system verifies the device’s Secure Element — the chip that holds the keys — but cannot detect physical modifications elsewhere in the hardware if the original security chip remains intact. In other words, a device with an extra component soldered onto the board, one that reads the recovery phrase as you type it or exfiltrates it over a radio link, can pass every official check. The trust model assumed the supply chain itself was honest.
Binance founder Changpeng Zhao urged users to be cautious but said early evidence pointed to a localized attack involving a single vendor, and called on the whole industry to help trace and recover the funds. Former Mt. Gox CEO Mark Karpelles publicly asked CryptoBilis to open unsold wallets so their circuit boards could be inspected — a striking echo of the era when exchange security meant trusting people rather than verifying hardware. For context, Bitcoin trades near 82,400 USD and Ethereum near 2,450 USD at the time of writing, so the suspected losses represent life-changing money for most of the affected users.
### What hardware wallet buyers should actually do
The practical takeaways are unglamorous but important. Buy directly from the manufacturer whenever possible, and treat any reseller — even an authorized one — as a link you have not personally verified. When a device arrives, inspect the packaging for tampering and never use a device that arrives pre-initialized or with a recovery phrase already printed on a card; legitimate devices generate the phrase on first setup. If you bought from an affected reseller in the past 90 days, follow Ledger’s guidance: do not initialize, and if you already did, migrate to a fresh device with a new recovery phrase.
Longer term, the incident is likely to accelerate two changes the industry has discussed for years: cryptographic attestation of the full device assembly rather than just the Secure Element, and shorter, more auditable distribution chains. Hardware security has always been a chain, and this month the world was reminded that the weakest link was never the cryptography — it was the truck, the warehouse and the reseller.
90M gone and genuine check still says all good because the secure element tests fine. the chip was never the problem, the reseller chain was
^ exactly. the tampering happens before the device ever ships, no firmware patch fixes a physical mod on the board
the tampered seals were the tell. if the box arrives with a busted seal you stop, full stop, no excuses about it being a shipping thing
verifying the first bytes means trusting the firmware that checks itself. you need a second untouched device to even attempt it, most buyers own one
Bought my Nano through an authorized EU reseller and still ran a full recovery check the day this broke. Paranoia costs nothing when the alternative is losing everything.
The part that gets me is the Genuine Check passing tampered boards. You pay premium money for a device whose whole pitch is ‘trust the chip’ and the check cannot see an extra component soldered right next to it. Bought mine straight from Ledger’s site and I’m still sweating.
Same here, checked my recovery flow twice last night. From what I’ve read the tampered units came through the Southeast Asian reseller, so devices shipped direct from France should be clean. Should be.
genuine check was always a firmware story. an extra chip on the board sits below what it inspects. reseller audits are the actual security product now
cryptobilis was the listed official partner for the region too. you did everything right, bought from the approved reseller, still ended up with a tampered unit. thats the part that gets me
the official directory is the worst part. ledger cashed the brand fee and skipped the audit. reseller vetting just became the whole security model
brand fee without audit requirements is the real failure here. the directory listed them as official, ledger owes buyers more than a pause and a blog post
collective punishment is the only move left honestly. one reseller printing convincing fakes means every seal and qr in the region is suspect now
qr verification only helps until the fakes stop cloning it. one burned reseller takes down trust in every anti tamper trick at once
Everyone dunking on hardware wallets is missing the point. The cryptography did not fail, a reseller channel got compromised. Same class of risk as buying a sealed phone off a shady marketplace.
Sure, but CZ calling it a single vendor attack is doing a lot of heavy lifting. Nobody has inspected the unsold stock yet, Karpelles literally asked them to open the sealed wallets.
same class sure, except my shady marketplace phone cant empty my cold storage. the vendor channel IS the product for a hardware wallet
the real number nobody mentions is how many tampered devices are still sitting in closets unopened. 90M is the discovered figure, the true one is higher
the unsold stock question is the whole thing. nobody has opened the remaining cryptobilis inventory, until then every SEA device is a schrodinger wallet
buying direct from the ledger store is the only fix here. 90M gone because a reseller page looked legit in the official directory
schrodinger wallet is exactly right. until every cryptobilis box gets opened, the 90M figure is just the floor of the discovery process, not the total
floor not total is the scary read. every unopened cryptobilis box in the region is a lottery ticket right now and nobody knows the actual odds
90 million stolen and Tether froze the USDT, yet nobody can say how much of that 90m was even in USDT. Freezing tokens is great PR when the bulk might already be sitting in BTC.
recovery check on a suspect device is the move, verify the phrase on an airgapped signer or just regenerate. ninety million says paranoia is cheap now
authorized reseller listed for malaysia and the philippines, 90M USD later. the vetting process did more damage than any hacker ever did
the directory being official made it worse. buyers did the due diligence they were told to do and still got burned, thats on ledger not them
the device verifies nothing if it was altered before boxing. supply chain beats secure element, every time, and 90M proved it
this is the lesson the industry refuses to learn. a secure element on a compromised board is a very expensive diary
ordered straight from the ledger site after this broke, paid extra shipping just to skip the regional distributor. betting that 90M climbs once people compare old xpubs