Ledger Investigates $86 Million Theft Linked to Southeast Asian Reseller

The Reported Theft

Users reported losing approximately $86 million in cryptocurrency from Ledger hardware wallets, according to social media posts and reports from security researchers. The stolen funds span multiple blockchains, including Bitcoin, Ethereum, and Tron, suggesting a systemic compromise rather than isolated incidents.

Ledger's Investigation and Supply Chain Focus

Ledger said it is investigating devices sold by a Southeast Asian reseller as a potential vector for the compromise. The company has not yet confirmed whether the wallets were tampered with before shipment, whether users fell victim to phishing after purchase, or whether a vulnerability in Ledger's firmware or software was exploited. The focus on a specific reseller suggests the breach may have been localized to unauthorized distribution channels rather than affecting all Ledger devices globally.

Security Implications

The incident underscores the risk of purchasing hardware wallets through unauthorized resellers or third-party marketplaces, where supply chain integrity cannot be guaranteed. Users who bought Ledger devices from official channels or authorized retailers have reported no signs of compromise. Security researchers and community members have used the episode to highlight the importance of verifying device authenticity and purchasing directly from manufacturers whenever possible.