
Ledger claims CryptoBilis cases are limited as up to $93M is traced, $10M frozen
CoinDesk reports that up to $93–94.5M in mostly USDT and TRON tokens was drained from 315–521 wallets across six or seven blockchains. The wallets were tied to Ledger hardware wallets sold by the authorized reseller CryptoBilis. Ledger confirmed an unauthorized hardware implant in at least one device but did not say how the devices were tampered with. Tether froze $10M, some funds moved through Tornado Cash and Zcash, and Ledger told affected users not to set up unused devices and to move funds to a new device with a fresh recovery phrase. The figures come from Bitquery and YFarmX onchain estimates, not a confirmed Ledger loss total.
TL;DR Hardware implant in Ledger devices sold via reseller CryptoBilis enabled roughly $93M in wallet thefts; Tether froze $10M and Ledger advises moving funds to a new device with a new seed.
Technologies named here
- Wallets linked to those devices
- Tether USDT freeze
- Fake Ledger Live app on Apple's App Store
- Tornado Cash and Zcash
- Ledger
- TRON
- Zcash
- Tornado Cash
- Tether
- Bitquery
- YFarmX
Threat actors named here
Related in Blockchain

THORChain Exploit Report #2 — GG20 root-cause disclosure

Black Thursday revisited: MakerDAO keeper exploited for $500K
.jpg)