LEDGER has paused CryptoBilis-sold sales of its hardware wallets after reports that funds were stolen from users who purchased devices through the Indonesian crypto reseller. The incident is said to have involved losses in excess of $86 million, according to pseudonymous blockchain analyst Specter. Ledger said that users who bought via CryptoBilis in the last 90 days should not set up a device if they have not already done so, and those who have set up should transfer assets to a new Ledger signer with a new seed.
The company later disclosed that one impacted device contained an unauthorized hardware implant, and that it is contacting affected users as part of an ongoing probe. CryptoBilis has stopped selling all hardware wallet stock pending the investigation.
Ledger urged resellers and distributors to source products only through authorised channels and warned against restocking returned stock or purchasing from unauthorised sellers, emphasising that recovery phrases must be generated by the device during setup and kept secret. In a follow-up update on 11 October 2026, Ledger said the CryptoBilis incident affected a limited number of devices and that all confirmed cases involve CryptoBilis-sold products.