Ledger Exposes Southeast Asia Reseller CryptoBilis in $91M Drain Incident

Incident Overview

Ledger has updated its investigation into a draining incident that resulted in an estimated $91 million in stolen funds. The company has confirmed that all confirmed cases from the October 9th incident involve devices sold through the Southeast Asia reseller CryptoBilis.

Affected Devices and Customers

One affected customer's device contained an unauthorized hardware implant, but Ledger has not stated that the implant caused every loss. The company has confirmed that the number of affected devices is limited.

Response and Recommendations

Ledger is urging users to reach out to Ledger Support through official channels and file complaints with their local law enforcement authorities. The company is also advising users not to purchase from unauthorized resellers, where the risk of buying suspicious, counterfeit or modified devices is high.

Systems and Direct Sales Channels

Ledger's systems and direct sales channels remain unaffected by the incident, according to the company.

Next Steps

Ledger is working with authorities while it reaches out to impacted users and provides further guidance on the incident.