Skip to content

Back to the catalog

theblock.coarticle

Ledger investigates wallet drains involving CryptoBilis buyers; estimate tops $86 million in losses

The Block reports that Ledger is investigating fund losses among Southeast Asian users who bought hardware wallets from the reseller CryptoBilis, an official reseller in Indonesia, Malaysia and the Philippines. Onchain researchers tanuki42 and Specter estimate losses above $72M and $86M across Bitcoin, Ethereum and Tron, but neither figure is confirmed. Ledger asked the reseller to pause sales and advised buyers from the past 90 days not to set up devices, or to move assets to a new signer with a new seed. Changpeng Zhao suggested a supply-chain attack with fake or tampered devices, and Mark Karpeles asked for circuit-board photos to check for tampering.

TL;DR Ledger probes $72–86M in wallet drains among CryptoBilis-reseller buyers, with suspected tampered devices; cause unconfirmed, users told to rotate seeds.

Organisations named here

  • Changpeng Zhao
  • Mark Karpeles
  • tanuki42

Technologies named here

  • SEAL 911
  • Onchain tracing analysis by researchers tanuki42 and Specter
  • Bitcoin, Ethereum and Tron addresses/assets drained
  • Ledger
  • Bitcoin
  • Ethereum
  • TRON
  • Specter

Techniques named here

  • Onchain fund tracing

Threat actors named here

  • Suspected supply chain attack involving one vendor
  • CryptoBilis