In an October 11 statement, the French company clarified that all confirmed cases of the October 9 crypto theft incident were linked exclusively to devices purchased through CryptoBilis, its authorized reseller in Southeast Asia.
“The volume of impacted devices is limited,” Ledger stated, without specifying exactly how many wallets had been compromised.
The company also stressed that its own systems and direct sales channels remained unaffected by the incident.
Ledger is currently working with relevant authorities to investigate the thefts and is reaching out to affected customers.
The latest statement comes amid reports of substantial cryptocurrency losses. Blockchain investigators have estimated that more than $86 million worth of digital assets may have been stolen, although the figure has not been officially confirmed.
Unauthorized hardware implant discovered
The latest update follows another alarming revelation in the ongoing investigation.
As previously reported, Ledger confirmed that one of the affected customers’ devices contained an unauthorized hardware implant, raising concerns about potential tampering with wallets before they reached their owners.
However, investigators have yet to establish whether similar modifications were responsible for all the reported thefts.
CryptoBilis has since confirmed that it has stopped selling all hardware wallets while the investigation continues.
Ledger is also tightening its supply-chain security measures, including reviewing its authorized reseller controls and improving hardware protections against physical tampering.
The company has reminded its distributors to obtain products exclusively through authorized channels and never resell returned devices.
Ledger also acknowledged that the threat extends beyond its own products, calling on other hardware wallet manufacturers and security researchers to improve industry-wide anti-tampering protections.
Be the first to comment