Hardware wallet manufacturer Ledger is actively investigating significant fund losses linked to a Southeast Asian reseller, prompting the company to issue urgent warnings to its user base. The investigation centers on CryptoBilis, a regional reseller through which affected users reportedly purchased their devices Cointelegraph.
The security incident has drawn attention from cryptocurrency researchers who have separately estimated that suspected crypto thefts connected to this matter range between $72 million and $86 million. These figures, while not confirmed by Ledger itself, suggest the scale of potential losses may be substantial Cointelegraph.
In response to the reports of drained wallets, Ledger has taken the step of warning buyers against setting up wallets obtained through the reseller in question. The company specifically advised users who may have purchased devices through this channel to exercise extreme caution and follow established security protocols for hardware wallet initialization Bitcoin Magazine.
Hardware wallets are generally considered among the most secure methods for storing cryptocurrency private keys, as they keep sensitive data offline and isolated from internet-connected devices. However, the security model depends heavily on the integrity of the supply chain and the initial setup process. Compromised devices or tampered seed phrase generation during setup can undermine the protection that hardware wallets are designed to provide.
The incident highlights persistent risks in the cryptocurrency hardware wallet ecosystem, particularly around reseller networks and device provenance. Users in regions where official distribution channels are limited may turn to third-party resellers, potentially exposing themselves to supply chain attacks or social engineering schemes that target the setup process itself.
Ledger's investigation remains ongoing as the company works to determine the precise nature and scope of the security breach affecting users who purchased through the Southeast Asian reseller.