sam_dev 
Hundreds of Ledger wallets drained, estimated losses exceed 86 million USD.
Hundreds of Ledger hardware wallet users are reported to have lost cryptocurrency assets in a serious security incident, with total estimated losses exceeding 86 million USD. Data recorded by a blockchain analyst shows unusual withdrawal transactions occurring on three major networks: Bitcoin, Ethereum, and TRON. The cause of the incident has not yet been officially confirmed.
According to information released on October 9, 2026, on-chain analyst Specter tracked the flow of funds from hundreds of affected wallets and identified several recipient addresses with signs of involvement in the incident. However, the loss figure of over 86 million USD is currently an estimate from blockchain analysis activities and has not been confirmed by Ledger.
Notably, the incident involves buyers of Ledger devices through the distributor CryptoBilis in Southeast Asia. Ledger Support has requested this unit to temporarily halt the sale and shipment of hardware wallets during the investigation. This is a precautionary measure taken as doubts about the safety of the devices sold have not yet been clarified.
According to the published information, customers who purchased Ledger wallets from CryptoBilis within the last 90 days are advised not to set up the device if unused. For those who have already set up their wallets, the guidance is to transfer assets to a new device and create an entirely new recovery phrase.
One of the hypotheses being considered by the security community is a supply-chain attack. In this scenario, the device or software could be tampered with before reaching the user, putting the owner at risk even when purchasing the product through a distributor. However, there is currently no evidence confirming that Ledger devices sold by CryptoBilis have been altered or that the asset loss originated from the supply chain.
Blockchain data tracked by analyst Specter also shows that three Bitcoin addresses mentioned during the investigation are holding a total of approximately 211 BTC at the time of reporting. This Bitcoin amount has not been recorded as moved at the time the data was mentioned. Monitoring the recipient addresses can help analysts assess the flow of assets, but it does not equate to identifying the perpetrator or the possibility of recovering the stolen funds.
Ledger has long warned users not to provide the 24-word recovery phrase to anyone and not to enter this phrase into websites, applications, or computers. Users should also carefully check transaction information directly on the device screen before confirming.
