The company advises customers of reseller CryptoBilis not to begin setting up their devices
Ledger confirmed that a device belonging to one of the users involved in the loss reports contained an unauthorised hardware implant. The company said it was contacting users as part of its investigation into devices purchased from Southeast Asian reseller CryptoBilis.
The investigator known as Specter estimated losses that could exceed $86 million across Bitcoin, Ethereum and Tron. Ledger has not confirmed the number of potentially affected customers or the value of the reported losses. The company asked anyone with information to contact its bounty programme at [email protected].
CryptoBilis confirmed that it had halted sales of its entire hardware wallet inventory until the investigation is concluded. Ledger recommends that users who purchased a device from the reseller do not begin setup if they have not already done so. Those who have already configured the device should consider moving their assets to a new Ledger signer, using a new seed as well.
CryptoBilis was listed as an authorised Ledger reseller in Indonesia, Malaysia and the Philippines. Ledger said the incident appeared to be limited to the individual reseller and its market, and that its infrastructure, systems and services had not been compromised. The investigation remains ongoing.
