Ledger claims CryptoBilis cases are limited as up to $93 million is traced, $10 million frozen
- Blockchain analytics firms estimate that attackers stole as much as $94.5 million from hundreds of wallets linked to Ledger devices sold by authorized reseller CryptoBilis, though Ledger has not confirmed the total.
- Ledger found an unauthorized hardware implant in at least one affected device, while Tether froze $10 million in USDT tied to the theft and investigators continued tracing the funds.
- Ledger advised CryptoBilis customers not to set up unused devices and urged those already using one to transfer their assets to a new device with a newly generated recovery phrase.
As much as $93.2 million in crypto was siphoned from wallets linked to the Ledger devices sold by the reseller CryptoBilis, according to several blockchain analytical and intelligence firms.
Tether has frozen $10 million in USDT tied to the theft, while Ledger said Sunday that the investigations into the theft, first reported three days ago, are still underway.
Ledger confirmed an unauthorized hardware implant in at least one affected device. The company did not say whether the stolen wallet was compromised in the same way or how the devices were tampered with.
Blockchain analysis and intelligence company Bitquery said it traced $93.2 million linked to the Ledger exploit. It said the hackers stole mostly USDT and TRON tokens from 315 wallets across six blockchains. Security research platform YFarmX reported a higher number, saying the attackers siphoned off $94.5 million from 521 addresses across seven blockchains. Both estimates are based on public blockchain data, not a confirmed Ledger loss total.
Ledger did not immediately respond to a CoinDesk request for confirmation of the amount stolen and whether it is considering a reimbursement plan for those affected by the exploit.