Ledger investigates potential wallet tampering after reports of $86 million in crypto stolen
Reported by CoinDesk · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Ledger is investigating reports that over $86 million in cryptocurrency may have been stolen from hundreds of wallets linked to devices sold by CryptoBilis, a Southeast Asian reseller. Ledger has asked CryptoBilis to pause sales and shipments and advised recent buyers not to set up their devices while the investigation is ongoing. The company has not independently verified the losses or confirmed the cause.
Why it matters
If confirmed, the potential theft represents a significant security breach affecting hardware wallets, which are widely used by investors to protect crypto assets offline. This incident could impact user trust in hardware wallet security and add to the industry's mounting losses from exploits in 2026. The source highlights no direct statement on the broader market or policy impact.
Key context
Ledger is a Paris-based hardware wallet maker founded in 2014, with over 7 million devices sold worldwide. Hardware wallets keep private keys offline, offering protection from exchange-based risks. The reported losses could result from a supply-chain attack where devices are tampered with before delivery. Ledger's own systems and wallet technology are not confirmed to be compromised.
Key numbers and entities
$86 million is the suspected amount stolen, according to blockchain investigator Specter. CryptoBilis is the reseller linked to the devices in question. Recent major crypto exploits include Bitget ($350 million), Liquid Network ($320 million), Drift ($295 million), and Kelp ($293 million), as cited by DefiLlama.
What remains unclear
The exact cause of the theft, the total number of affected users, and whether the incidents are connected remain unverified. It is not confirmed if device tampering or pre-generated recovery phrases caused the losses. Ledger has not confirmed the reported loss amount or identified vulnerabilities in its products. The investigation is still ongoing with no definitive findings yet.