Ledger's $93 Million Exploit: Here's What Really Happened

utoday

Yesterday

Ledger is investigating reports of cryptocurrency losses among customers in Southeast Asia who purchased hardware wallets through CryptoBilis, a reseller listed as an official distributor in Indonesia...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.0a0bd8dc.png","ogUrl":"https://www.itiger.com/news/2674714812"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2674714812\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2674714812?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-10-10 10:49","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2674714812","market":"nz","top_or_hot":-1,"title":"Ledger's $93 Million Exploit: Here's What Really Happened","media":"utoday","content":"<div>\n<p>Ledger is investigating reports of cryptocurrency losses among customers in Southeast Asia who purchased hardware wallets through CryptoBilis, a reseller listed as an official distributor in Indonesia...</p>\n\n<a href=\"https://u.today/ledgers-93-million-exploit-heres-what-really-happened\">Source Link</a>\n\n</div>\n","source":"utodaynews_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ledger's $93 Million Exploit: Here's What Really Happened</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nLedger's $93 Million Exploit: Here's What Really Happened\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-10-10 10:49 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://u.today/ledgers-93-million-exploit-heres-what-really-happened><strong>utoday</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Ledger is investigating reports of cryptocurrency losses among customers in Southeast Asia who purchased hardware wallets through CryptoBilis, a reseller listed as an official distributor in Indonesia...</p>\n\n<a href=\"https://u.today/ledgers-93-million-exploit-heres-what-really-happened\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4601","symbol_name":"加密货币现货ETF","start_time":0,"source_url":"https://u.today/ledgers-93-million-exploit-heres-what-really-happened","article_id":"2674714812","we_media_id":null,"thumbnails":[],"rights":{"source":"utodaynews_highlight","url":"https://u.today/ledgers-93-million-exploit-heres-what-really-happened","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2674714812","pubTimestamp":1791600540,"columns":[],"sourceInfo":{"source_id":"utodaynews_highlight","name":"u.today"},"weMediaInfo":null,"summary":"Ledger is investigating reports of cryptocurrency losses among customers in Southeast Asia who purchased hardware wallets through CryptoBilis, a reseller listed as an official distributor in Indonesia","collect":0,"end_time":0,"defaultTopTitle":"u.today","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4601":"加密货币现货ETF","TETH":"21Shares Ethereum ETF","ETH":"低成本以太坊ETF-Grayscale","ESK":"REX-Osprey ETH + Staking ETF","STCE":"Schwab Crypto Thematic ETF","SETH":"1倍做空以太币期货ETF-Proshares","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","ETCO":"Grayscale Ethereum HIGH Income ETF"},"translate_title":"Ledger 的 9300 万美元骗局：以下是真实发生的事情","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETH":0.64,"ETCO":0.6,"STCE":0.62,"ETQ":0.6,"TETH":0.6,"ESK":0.6,"SETH":0.6},"content_text":"Ledger is investigating reports of cryptocurrency losses among customers in Southeast Asia who purchased hardware wallets through CryptoBilis, a reseller listed as an official distributor in Indonesia, Malaysia and the Philippines.The incident came to light on Friday, Oct. 9, as blockchain researchers traced funds from suspected victims' wallets. Initial estimates put the losses above $72 million, but subsequent analysis by Bitquery expanded the reported total to $92.9 million across 311 wallets on five networks: Bitcoin, Ethereum, TRON, BNB Chain and Polygon.The distinction between a wallet-draining incident and a confirmed compromise of Ledger's own systems is important. Ledger devices are designed to keep private keys offline, but maliciously modified hardware or a compromised supply chain could potentially undermine that protection. The precise attack method remains unconfirmed, and the available evidence does not establish that Ledger's core infrastructure was breached.Ledger said it had asked CryptoBilis to suspend all sales and shipments while its investigation proceeds. It also issued precautionary guidance to customers who purchased devices from the reseller during the previous 90 days.\"Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis,\" the company said in its statement.Ledger advised customers who had bought devices from the reseller but had not yet initialized them not to proceed with setup. Customers who had already configured their devices were advised to consider moving their assets to a new Ledger signer with a new seed phrase.Blockchain investigator Specter separately reported tracing suspicious addresses that received funds from hundreds of victim wallets across Ethereum, TRON and Bitcoin, estimating losses above $86 million.Bitquery's analysis identified small test transactions over approximately two weeks before the main outflows, followed by coordinated transfers across multiple networks. Researchers also observed groups of wallets signing similar requests within seconds of one another. These patterns suggest preparation and a possible common point of control, but blockchain transactions alone cannot establish how the attacker gained access to the wallets.$10 million in USDT frozen as investigators trace fundsThe investigation has produced several developments in tracking the stolen assets. Tether reportedly froze approximately $10 million in USDT across 20 wallets associated with the suspected theft. The action prevents the affected USDT from being transferred through those addresses, but does not automatically return the funds to victims.At the analysis cutoff, approximately 14,810 ETH remained in a group of suspected attacker-controlled wallets. Researchers also identified around 203.8 BTC in associated Bitcoin addresses, with those funds reportedly unmoved at that point.Bitquery's analysis further identified the movement of approximately 1,254 ETH through Tornado Cash and Zcash. The funds reportedly later appeared in three new wallets, including one holding about 2.1 million USDC. The presence of USDC may provide another potential avenue for intervention, depending on the issuer's assessment and the addresses involved, but a freeze should not be assumed unless confirmed.Binance founder Changpeng Zhao, commonly known as CZ, said the information available at the time pointed toward a localized supply-chain incident involving one vendor. He suggested that a small number of customers may have received counterfeit or tampered devices, while calling on industry participants to help trace and recover the assets. This remains an assessment, not a confirmed finding from Ledger's investigation.Former Mt. Gox CEO Mark Karpelès also shared photographs of a Ledger Nano X he said he had received from Malaysia. According to Karpelès, the device's shrink-wrap appeared intact, but he found a concealed electronic module where the screen padding should have been. He said hardware implants had become more sophisticated, potentially making modified components harder to distinguish from original parts.Karpelès has requested photographs from affected users to help identify similar modifications. However, Ledger has not been shown to have confirmed that the reported module was functional or connected to the CryptoBilis incident.The latest independent estimate places the reported losses at $92.9 million, but that figure has not been confirmed by Ledger. The cause of the incident also remains unresolved, with the available evidence pointing toward a possible supply-chain issue without conclusively proving that counterfeit or modified devices were responsible.For now, the confirmed response includes Ledger's investigation and reseller suspension, its precautionary guidance to customers, and the reported freeze of $10 million in USDT. Further conclusions will depend on forensic findings and continued on-chain tracing.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"}}}