Ledger has officially advised customers who recently purchased hardware wallets through CryptoBilis to halt the setup process immediately, following the discovery of over $87 million in suspected thefts. The warning comes after an on-chain investigator tracked massive outflows from wallets recently initialized via the reseller. If you have a new device from this source, do not transfer any assets to it, as the private keys may already be compromised by a potential supply chain vulnerability.
The investigation centers on the possibility that devices were tampered with before reaching customers, a sophisticated form of hardware attack that bypasses standard digital security. While Ledger’s internal manufacturing processes are currently deemed secure, the "middle-man" stage involving this specific reseller appears to be the point of failure. The reported $86 million in losses indicates a coordinated effort to harvest recovery phrases from unsuspecting buyers during the initial unboxing and setup phase.
This incident highlights a critical shift in crypto security risks for 2026, moving from software phishing toward physical supply chain exploitation. For US-based investors, this serves as a stark reminder of the risks associated with third-party distributors. Security experts generally recommend purchasing hardware wallets directly from the manufacturer to ensure the cryptographic integrity of the device remains intact from the factory to the doorstep.
Market participants should watch for Ledger’s full forensic audit and potential legal actions against the reseller. Affected users are encouraged to monitor Ledger’s official support channels for information regarding device replacements or potential recovery steps. This event may trigger increased regulatory scrutiny of crypto hardware resellers and their security protocols to prevent similar multi-million dollar thefts in the future.