UPDATE: Ledger confirms hardware implant as reseller theft reaches up to $94.5M
CIE News ·
Ledger confirmed an unauthorized hardware implant was found in a device from reseller CryptoBilis, with blockchain analysts now estimating total losses between $93.2 million and $94.5 million across multiple chains.
Ledger confirmed that an unauthorized hardware implant was discovered in at least one device sold by authorized reseller CryptoBilis, CoinDesk reported. As previously reported, Tether froze $10 million in Tether (USDT) tied to the theft, which was initially tracked at roughly $81 million. Updated figures from blockchain analytics firms indicate that between $93.2 million and $94.5 million has now been drained from affected users.
According to blockchain intelligence firm Bitquery, attackers siphoned $93.2 million, primarily in USDT and TRON (TRX), across 315 wallets on six blockchains. Security research platform YFarmX estimated the loss at $94.5 million across 521 addresses on seven blockchains. Bitquery stated that approximately $81 million remained traceable onchain as of October 11, 2026, while other assets were transferred through privacy tools including Tornado Cash and Zcash (ZEC).
Ledger maintains that the issue is limited to devices distributed by CryptoBilis. The company warned customers not to configure unused hardware purchased from the reseller, and advised anyone who has already activated one to transfer their holdings to a fresh device with a newly generated recovery phrase.