Ledger reportedly asked Southeast Asian reseller CryptoBilis to pause sales as it investigated reports of customer losses. A BeInCrypto report republished by Yahoo Finance cites on-chain investigator Specter’s estimate of more than $86 million in suspected losses. It does not substantiate the $93.2 million figure or show that reseller devices caused the losses.
- Ledger reportedly paused CryptoBilis sales and shipments during an investigation.
- Specter estimated suspected losses at more than $86 million.
- Ledger had not confirmed the amount or the cause.
- The available account provides no evidence that devices were tampered with.
What Ledger reportedly told CryptoBilis customers
BeInCrypto named the reseller as CryptoBilis in a report by Lockridge Okoth, later republished by Yahoo Finance. The report describes the business as a Malaysian shop founded in 2020 that also operates in Indonesia and the Philippines.
According to the report, Ledger Support asked CryptoBilis to pause sales and shipments of Ledger devices during Ledger’s investigation. Customers who had bought from the shop in the previous 90 days were reportedly advised not to set up their devices. Those who had already done so were told to move their funds to a new device with a new seed phrase. Ledger reportedly said the pause was “pending the results of our investigation.”
The report does not say whether those instructions came in a customer notice, a message to the reseller or through another channel. It also does not say whether the pause is still in effect or whether Ledger has finished its investigation.
A sales pause shows that Ledger took a precaution. It does not prove that CryptoBilis devices were altered or caused the reported losses. The available information also does not explain how the affected wallets were connected to the reseller.
The $93.2 million figure is unsubstantiated
The BeInCrypto report attributes an estimate of more than $86 million in suspected losses to Specter, an on-chain investigator. It does not explain or verify the separate $93.2 million figure. The two amounts should not be treated as interchangeable.
The report does not say Ledger confirmed Specter’s estimate. It says Ledger had not confirmed the total or explained how funds left users’ wallets. An investigator’s estimate, a company-confirmed loss and a final accounting of stolen assets are not the same thing.
Specter reportedly traced funds from hundreds of wallets across Ethereum, TRON and Bitcoin. The report also mentions three Bitcoin addresses holding about 211 BTC combined. None of that Bitcoin had moved as of 13:44 UTC on a Friday. The report gives no calendar date for that observation. Those balances alone do not establish total losses across multiple networks or prove that every wallet belonged to a CryptoBilis customer.
What could put funds in a hardware wallet at risk?
A hardware wallet helps protect the private keys that control crypto assets, but it cannot make funds theft-proof. Someone else obtaining a recovery phrase, a deceptive transaction approved by a user, or a compromised device or setup process could put funds at risk. The available information does not identify any of these, or another mechanism, as the cause in this case.
A seed phrase, also called a recovery phrase, is a set of words that can restore access to a wallet. If someone else has obtained it, moving to another device but reusing the same phrase will not secure the funds. That is why the reported advice called for a new device and a new seed phrase.
If you’re concerned, follow verified instructions from Ledger through its official channels. If those instructions call for moving funds, create a new wallet on a trusted device with a newly generated recovery phrase, then transfer the funds to it. Never enter a recovery phrase into a website, message or support chat. This is general security guidance, not confirmation that a particular remedy addresses the cause of these reported losses.
Key questions and answers
-
Did Ledger confirm a $93.2 million loss?
No. The BeInCrypto report attributes an estimate of more than $86 million to Specter and says Ledger had not confirmed the total. It does not substantiate the $93.2 million figure.
-
Were CryptoBilis devices proven to be compromised?
No. Ledger reportedly asked the reseller to pause sales during its investigation, but the available information does not show that devices were altered or caused the losses.
-
What is known about the cause?
No cause has been confirmed. The reported information does not explain how funds left the wallets or establish that all the wallets Specter traced belonged to CryptoBilis customers.
-
What should a concerned customer do?
Follow verified Ledger guidance. If moving funds, use a newly created wallet with a newly generated recovery phrase. Do not reuse a phrase that may have been exposed or enter it online.
