Ledger Halts CryptoBilis Sales Amid $86 Million Theft

Ledger announced it had found an unauthorized hardware implant in cryptocurrency wallets sold by reseller CryptoBilis, prompting a temporary halt of sales through that channel ¹. The company said on Friday it was investigating reports that users in Southeast Asia who purchased Ledger products from CryptoBilis had experienced fund losses totaling more than $86 million ¹. This incident is part of a broader pattern of supply‑chain attacks targeting crypto devices; similar rogue firmware updates injected into IoT routers sold through Amazon back in 2024 compromised millions worldwide. Chainalysis’ latest report published this past June estimates the average cost of a crypto theft incident at roughly $317k, underscoring the financial impact of the $86 million loss. Experts suggest such targeted physical tampering points to nation‑state involvement rather than opportunistic criminals, as specialized skills are required beyond typical ransomware groups like ShinyHunters. The discovery highlights the need for rigorous supply‑chain security and vigilance among wallet manufacturers and resellers to protect users from hardware‑based fraud.