Markets › News › Security

Ledger Investigates $80M+ Crypto Theft Linked to Southeast Asian Reseller

Ledger warns customers after reports of compromised wallets sold through Malaysia-based CryptoBilis reseller.

Ledger warns customers after reports of compromised wallets sold through Malaysia-based CryptoBilis reseller. This is an original TLT brief synthesising 2 outlets (The Coin Republic, Bitcoin World), plus live market data, as of Mon, 12 Oct 2026 18:30:06 UTC.

Why it matters

This incident raises concerns about hardware wallet security and the potential risks associated with third-party resellers, affecting user trust and highlighting vulnerabilities in the supply chain.

Covered by 2 outlets over about 2 days — TLT synthesises them all into one brief
  1. Bitcoin World
    Ledger Probes Reported $80M+ Crypto Theft Tied to Reseller ↗
  2. The Coin Republic
    Crypto News: Ledger Issues Urgent Warning to CryptoBilis Buyers After Wallet Drain ↗
Key takeaways
  • Ledger warns customers after crypto losses linked to CryptoBilis-sold wallets.
  • On-chain data shows $93.2M-$103.4M stolen, with funds moved before freezing.
  • CryptoBilis has halted hardware wallet sales amid the investigation.
  • Bitcoin down 1.53% in 24 hours amid broader market decline.
What the reporting agrees on

Multiple outlets, including The Coin Republic, Bitcoin World, Unchained, and Decrypt, confirm that Ledger has issued a warning about compromised hardware wallets sold through CryptoBilis, a Malaysia-based reseller. Estimates of the stolen amount vary, with Unchained reporting a range of $93.2 million to $103.4 million based on on-chain data, while Bitcoin World cites reports of over $80 million in losses. Decrypt notes that Ledger's direct sales and systems remain unaffected, and CryptoBilis has stopped selling hardware wallets. The Coin Republic emphasizes that all confirmed cases involve devices sold through CryptoBilis.

Ledger has issued an urgent warning to customers who purchased hardware wallets through CryptoBilis, a Southeast Asian reseller, after reports of significant crypto losses. The warning follows claims that compromised devices may have been sold by the reseller, leading to unauthorized access to users' funds.

According to on-chain data analyzed by Bitquery and reported by Unchained, the theft amounts to between $93.2 million and $103.4 million. The stolen funds, primarily in USDC, were moved out of five wallets before any freeze could be implemented. This information suggests a sophisticated and coordinated attack on users who acquired Ledger wallets through CryptoBilis.

Bitcoin World reports that Ledger has opened an investigation into the matter, while The Coin Republic highlights that every confirmed case of loss involves devices sold through the Malaysian reseller. Decrypt adds that Ledger's own systems and direct sales channels remain unaffected, and CryptoBilis has ceased selling hardware wallets during the investigation.

The incident has raised concerns about the security of hardware wallets and the potential risks associated with third-party resellers. It underscores the importance of verifying the authenticity of devices and the need for enhanced security measures in the supply chain. Users who purchased Ledger wallets through CryptoBilis are advised to take immediate action to secure their funds.

The broader crypto market remains under pressure, with the total market cap at $2.86 trillion and Bitcoin down 1.53% in the last 24 hours. The Fear & Greed Index stands at 69, indicating a state of 'Greed' among investors. The USDC circulating supply, as reported by DeFiLlama, is $72.93 billion, suggesting that the stolen funds represent a significant portion of the stablecoin's total circulation.

The development highlights the need for increased vigilance and security in the crypto space, particularly as more users adopt hardware wallets for secure storage. As the investigation continues, it will be crucial to monitor how Ledger and other stakeholders address the issue and what measures they implement to prevent similar incidents in the future.

The market when this published · October 12, 2026
Total market cap$2.86T
Bitcoin 24h-1.53%
Ethereum 24h-1.14%
BTC dominance58.0%
Fear & Greed69 · Greed
On-chain & primary-source check

Figures and sectors in this story, checked live against on-chain aggregators · October 12, 2026.

USDC circulating supply$72.92BDeFiLlama ↗

TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.

Ledger Investigates $80M+ Crypto Theft Linked to Southeast A — questions & answers

What is the estimated amount stolen in the CryptoBilis incident?

Estimates range from $80 million (Bitcoin World) to $93.2M-$103.4M (Unchained).

How did Ledger respond to the incident?

Ledger issued an urgent warning and opened an investigation, while CryptoBilis stopped selling hardware wallets.

Are Ledger's direct sales affected by the incident?

No, Ledger's direct sales and systems remain unaffected, according to Decrypt.

Which outlets reported this story?

This is an original TLT brief that synthesises reporting from The Coin Republic, Bitcoin World, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

TLT Newsdesk Data-stamped

TLT's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · October 12, 2026 ⛓ Timestamped at Bitcoin block #971,119 sha256:1b07e75b3eb26289
Corroborated across 2 outlets, reported over about 2 days — this is an original TLT summary with live market data, not the original article.Bitcoin World · Oct 10 07:28 ↗The Coin Republic · Oct 12 09:00 ↗

Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.