Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DDeFi Safety ToolsNEWS · DATA · PRACTICAL SAFETYGet the briefing
BTC$82.6K+2.58%ETH$2.5K+3.09%DeFi TVL$91.8BMarket dataDEX 24h$10.7BMarket dataStablecoin cap$311.5BMarket dataETH gas0.22 gweiNetwork data2026-10-09 17:54 UTC
DeFi Safety · Fact checked

Ledger Probes Potential Theft of $87M in User Funds Tied to Crypto Wallet Reseller

Ledger asked reseller CryptoBilis to pause sales and urged recent buyers not to set up their devices, as an onchain investigator tracked more than $86 million in suspected thefts.

By DeFi Tools Guide Editorial Team · Published Oct 9, 2026, 1:51 PM UTC · Updated 2026-10-09 · Risk level: medium
Sources checked: Oct 9, 2026, 5:01 PM UTC

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

Ledger asked reseller CryptoBilis to pause sales and urged recent buyers not to set up their devices, as an onchain investigator tracked more than $86 million in suspected thefts.

Reported details

  • Ledger investigates potential wallet tampering after reports of $86 million in crypto stolen    CoinDesk
  • The hardware wallet maker said it is investigating devices sold by a Southeast Asian reseller as social posts swirl about crypto assets drained from Bitcoin, Ethereum and Tron addresses.
  • Ledger halts CryptoBilis sales and warns recent buyers as an analyst claims $86 million in user losses.
  • Ledger said it is investigating reports of fund losses from users in Southeast Asia who bought its products from reseller CryptoBilis.
  • TL;DR Ledger asked CryptoBilis to suspend sales and shipments of its devices while it investigates reports of potential cryptocurrency theft affecting customers in Southeast Asia. On-chain investigator Specter claims to have traced funds from hundreds of affected wallets, with estimated losses exceeding $86 million. The company advises customers who purchased devices from the reseller within … Read more

Why this matters

Ledger Probes Potential Theft sits on the regulatory side rather than the structural side: the useful question is which dated rule, if any, follows this notice, and who wrote it. A rule that is not published yet changes nothing about who may act today, so treat the pending text as pending rather than as settled.

Evidence boundary

The scope is limited to what the linked reports state, and where two of them diverge both positions are recorded without either being picked in advance.

What to verify

Before acting on Ledger Probes Potential Theft, read the dated rule text itself rather than a summary of it, and note which agency wrote it and whether the comment period is still open.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources