Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
Incident record · Under review

How did: Credential compromise

Ledger says the confirmed cases in a reported wallet draining incident involve devices sold through CryptoBilis, a Southeast Asian reseller. An unauthorized hardware implant was found in one affected device. The investigation raises a question that wallet instructions rarely answer…

StatusUnder review
Reported lossUnavailable
ChainMulti-chain
Confidence55%

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

Record history

First seen: 2026-10-13T12:20:00.000Z. Last updated: 2026-10-13T13:32:43.036Z. Revision: 1.