Ledger Orders Resellers to Remove Hardware Wallets in Seven Markets Amid Tampering Concerns
Ledger has asked resellers in Southeast Asia and Hong Kong to stop selling its hardware wallets following reports of compromised devices.
Ledger has asked resellers in Southeast Asia and Hong Kong to stop selling its hardware wallets following reports of compromised devices. This is an original TLT brief synthesising 2 outlets (Blockonomi, Decrypt), plus live market data, as of Wed, 14 Oct 2026 11:00:08 UTC.
This development highlights growing security concerns in the crypto hardware wallet industry and underscores the risks associated with supply chain vulnerabilities, potentially eroding user trust in hardware security solutions.
- Ledger requested removal of its wallets from shelves in seven markets due to security concerns.
- Reports link compromised devices to a Southeast Asian reseller, CryptoBilis.
- Trezor will end reseller authorizations by January 1, 2027, citing similar security issues.
Multiple outlets (Blockonomi, Decrypt, and Cointelegraph) confirm that Ledger has instructed resellers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to stop selling its hardware wallets. This decision follows reports of compromised devices, particularly those sold through the reseller CryptoBilis. While Blockonomi mentions that only one confirmed incident has been identified so far, Decrypt and Cointelegraph suggest a broader pattern of tampering, with Decrypt noting that Trezor will terminate reseller agreements by January 1, 2027, in response to similar security issues.
Ledger, a leading manufacturer of hardware cryptocurrency wallets, has instructed resellers in seven markets to remove its products from shelves due to concerns over compromised devices. The affected markets include Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong. This move comes after reports surfaced linking stolen crypto assets to devices purchased through a Southeast Asian reseller, CryptoBilis.
According to Decrypt, the issue stems from a hidden implant in some wallets that transmitted users' recovery phrases, potentially exposing their private keys and compromising their crypto assets. Cointelegraph adds that Ledger has requested the removal of devices while investigators work to determine the source and extent of the tampering.
The decision by Ledger is corroborated by multiple outlets, with Blockonomi, Decrypt, and Cointelegraph all reporting the request for removal and the involvement of CryptoBilis. However, there are some differences in the details; Blockonomi suggests that only one confirmed incident has been identified, while Decrypt and Cointelegraph imply a more widespread problem.
In a related development, Trezor, another major hardware wallet manufacturer, has announced that it will end all reseller authorizations by January 1, 2027. This decision, reported by Decrypt, is likely in response to the growing security concerns and the need to ensure tighter control over the distribution chain.
The total cryptocurrency market cap currently stands at $2.86 trillion, with the overall market remaining relatively flat. 
Bitcoin has seen a slight 24-hour decline of 0.45%, and the Fear & Greed Index is at 62, indicating a state of 'Greed' among investors. The broader implications of this development may affect consumer confidence in hardware wallets and could prompt increased scrutiny of supply chain security in the crypto industry.
Ledger Orders Resellers to Remove Hardware Wallets in Seven — questions & answers
Why did Ledger ask resellers to remove its wallets?
Ledger requested the removal due to reports of compromised devices, including a hidden implant that transmitted users' recovery phrases.
Which markets are affected by Ledger's removal request?
The affected markets are Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong.
What is Trezor's response to the security issues?
Trezor will terminate reseller authorizations by January 1, 2027, in response to similar security concerns.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from Blockonomi, Decrypt, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.