Ledger investigates wallet tampering tied to tens of millions in crypto thefts

Ledger has opened an investigation into a wave of reported fund losses among customers in Southeast Asia. The common thread so far is devices bought through CryptoBilis, an authorized Ledger reseller operating in Indonesia, Malaysia, and the Philippines. What Ledger is telling customers Ledger announced the probe on October 9, 2026, and instructed CryptoBilis to stop all sales and shipments immediately. The guidance for buyers depends on whether they have opened the box. Anyone who bought from the reseller in the last 90 days and has not set up the device yet should leave it uninitialized. Customers who already set up a wallet are being urged to move their assets to a new Ledger device. That new device should generate a completely fresh seed phrase. Ledger has drawn a firm line around its own infrastructure. The company says its systems and the devices it sells directly have not been compromised. The alleged spy hardware The tampering theory took shape on social media. Photos and videos posted on X and Threads appear to show a small circuit board tucked beneath the device’s screen. According to those posts, the implant allegedly captures whatever appears on the display. That would ...