Cyberattacks

$86 Million Crypto Heist Tied to Tampered Ledger Hardware

$86M in crypto stolen via Ledger device hack. Hardware implants found in units sold through one Southeast Asian reseller.

By Content Team

Oct 14, 2026

ON THIS PAGE

On-chain investigator Specter estimates losses may top $86 million from a supply chain attack on Ledger hardware signers sold through Southeast Asian reseller CryptoBilis. Ledger’s Donjon security team confirmed an unauthorized hardware implant inside one affected user’s device, and says it hasn’t confirmed how many users were hit or how much went missing.

Someone along the distribution chain appears to have soldered a small circuit board inside the enclosure, under the screen. The implant reads the 24-word recovery phrase as the signer displays it during setup, then transmits it over LTE using a built-in eSIM — giving attackers full access to victims’ wallets.

Disclosed on October 9, the theft was pinned to CryptoBilis-sold units immediately, and every confirmed loss so far involves one. Ledger tells anyone who bought from the reseller in the last 90 days and hasn’t started setup to leave the device alone; anyone who has set one up should move assets to a new signer with a new seed.

Source: SecurityWeek

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?