Ledger said every confirmed case involves devices sold by the authorized reseller CryptoBilis, though critics argue the hardware-wallet maker must answer for that sales channel. Blockchain analytics firms estimate attackers stole between $93.2 million (Bitquery) and $94.5 million (YFarmX) from wallets linked to these devices, though Ledger has not confirmed a total. Ledger confirmed an unauthorized hardware implant in at least one affected device, and Tether froze $10 million in USDT tied to the theft. Bitquery said about $81 million could still be traced onchain as of Oct. 11, with some funds moved through Tornado Cash and Zcash. Ledger advised CryptoBilis customers not to set up unused devices and, if they already use one, to move assets to a new device with a newly generated recovery phrase.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on CoinDesk ↗
Related news
- Ledger Says All Confirmed Cases in Suspected $87M Drain Tied to Reseller CryptoBilis
Ledger said every confirmed case in last week's wallet-draining incident involves devices sold through Southeast Asian reseller CryptoBilis, while its own systems and direct sales channels remain unaffected. The company described the number of affected devices as “limited,” said it is working with authorities, and noted that CryptoBilis has ceased all hardware wallet sales. Onchain investigator Specter traced more than $86 million in suspected thefts across Ethereum, Tron and Bitcoin, and YFarmX sent Ledger a list of more than 450 drained wallets, though Ledger has not confirmed these figures or the cause. Separately, a user on X claimed to have found tampered Ledger devices in Europe and called for a recall, a claim that has not been independently verified. Ledger has told authorized resellers never to restock returned products and advised CryptoBilis buyers to move their funds to a new seed phrase on a device bought from Ledger.
- Ledger says 'spy' chip inside CryptoBilis Ledger devices transmitted wallet keys over mobile network
Ledger said a covert chip hidden in some hardware wallets sold by reseller CryptoBilis captured users' 24-word recovery phrases from the device screen and sent them to attackers over an LTE mobile network using an eSIM. The implant did not modify the secure element, the operating system, or any transactions and signatures, so Ledger describes it as a physical supply-chain attack rather than a breach of its software or systems. Ledger has confirmed one affected signer with an unauthorized implant and says all confirmed losses in the Oct. 9 incident involved CryptoBilis-sold devices, while it is still examining reports in other devices and locations. Onchain researchers estimated losses of up to $93.2 million across more than 300 wallets, and Tether froze $10 million of USDT tied to the theft. CryptoBilis has stopped selling Ledger signers, and customers who already used one should move assets to a device with a newly generated recovery phrase.
- Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis
Ledger said LTE-enabled implants in wallets sold by CryptoBilis captured the 24-word recovery phrases shown on device screens during setup and sent them over cellular networks via an eSIM, without compromising the secure chips or altering transactions. The issue came to light after crypto losses involving devices sold through the reseller, which is listed as authorized in Indonesia, Malaysia and the Philippines. Blockchain investigator Specter estimated losses could exceed $86 million, while Yfarmx put them at $103 million, though Ledger has not confirmed a total. CryptoBilis halted sales of all hardware wallet brands in those three countries, Trezor said it received no reports of tampered devices but removed the reseller, and OneKey terminated its authorization and offered free replacements for devices bought from CryptoBilis in 2026. Ledger is also examining reports beyond the reseller, including European cases involving devices bought from MediaMarkt, but has not confirmed a link.
- Ledger says unauthorized implant found in at least one device sold by CryptoBilis
Related markets
Latest news
- Roblox Is Now Down 38% in 2026: Is RBLX Stock Dead Money or Poised for a Comeback?
Roblox stock is down 38% year to date to $50.41, with a late-September court ruling letting a Los Angeles County child exploitation lawsuit proceed and a Jefferies downgrade to Underperform adding pressure. Jefferies argued the rally after the Q2 report priced in too much bookings growth, which rose only 8% to $1.6 billion in Q2 even as daily active users grew 10% to 123 million. Safety changes, including a mandatory age check, had already led Roblox to cut its full-year revenue growth forecast to 20% to 25% earlier this year. For Q3 2026, Roblox forecasts a year-over-year bookings decline of 14% to 18%. Take-Two (down 20%) and GameStop (up 31%) year to date suggest the pressure is specific to Roblox, and the article frames the key test as whether bookings stabilize while user growth continues.
- Super Micro (SMCI) Won Over $60 Billion in Orders, Is the Discount Deserved?
A contractor linked to Super Micro Computer (SMCI) pleaded guilty earlier this month to helping ship servers with advanced Nvidia chips to China, a case prosecutors say involved billions of dollars of U.S. AI technology, though the company says it was not named as a defendant and its operations are unaffected. Sales for the fiscal year ended June reached $39.1 billion, up from $22.0 billion, with CEO Charles Liang citing more than $60 billion in new orders, several hundred added enterprise customers, and a record backlog. Management guides to $65.0 billion to $72.0 billion in fiscal 2027 sales, and sales have grown about 61.5% a year over five years. Gross margin was 10.8% for the full year but rose to 17.5% in the June quarter, with net income of $1,178 million, while the trailing 12-month operating margin was 7.09%. The article notes the stock trades at a much lower multiple of expected earnings than the sector, and that one strong quarter does not yet prove a new margin level.
- Is Nvidia Stock Really Trading for Just 8 Times 2030 Earnings?
Nvidia is the market's most valuable company, with a market cap above $5 trillion. It trades at 27 times adjusted trailing earnings, but only about 8 times analysts' estimate for fiscal 2030 earnings, a figure the author stresses is a moving target. Revenue growth accelerated from 56% in Q2 FY 2026 to 106% in Q2 FY 2027, though guidance points to a slight slowdown in the current quarter. The stock trades at 13 times next year's earnings, and the board recently authorized a record $150 billion in share repurchases. The author also acknowledges risks such as slower growth or contracting net margins.
- California billionaire tax could backfire, Stanford study says
Stanford economists Benjamin Jaros and Joshua Rauh argue in an NBER working paper that California's proposed one-time 5% tax on billionaire wealth could raise far less than projected and ultimately reduce state revenue. Seven billionaires, including Peter Thiel, Larry Page and Sergey Brin, have publicly left the state, removing about $540 billion, or 30%, of California's billionaire wealth from potential taxation. The authors estimate the measure could generate only about $30 billion, versus the $100 billion projected by proponents, while losing $1 billion to $3.5 billion a year in income tax revenue could leave the state about $39 billion worse off in present-value terms if those losses persist. The measure, Proposition 40, goes to voters next month, and a Citrin-Politico poll found 46% of likely voters in favor and 43% opposed. Supporters, including Nobel laureates Daron Acemoglu and Joseph Stiglitz, argue the tax will fund health care and that California has attracted more venture funding since the proposal was announced.
- US Orders Civilian Agencies to Rip DeepSeek Out of Government Systems
The U.S. Department of Homeland Security on Monday ordered civilian federal agencies to remove DeepSeek products and third-party services built on the model from their IT systems, and to stop buying them. The notice warns that using DeepSeek may transfer sensitive data to China and could produce intelligence on U.S. persons and agencies. The Commerce Department, the Navy, and the states of New York, Tennessee and Virginia had already restricted DeepSeek. The FCC votes on October 29 on barring Chinese labs from testing electronics for U.S. use.
- NVIDIA Stock And 2 Other Undervalued Stocks To Own
Rising interest rates have pushed down bond prices, with 10-year U.S. Treasuries recording one of their steepest multi-year declines since the 18th century. The article highlights three U.S. stocks that a Simply Wall St cash flow screen considers attractively priced relative to their future cash flow potential: NVIDIA, Wells Fargo and J.B. Hunt Transport Services. NVIDIA generated about US$275.4b from Compute & Networking and US$27.6b from Graphics, with a market cap of US$5,170.6b, and the piece notes that an open-source or cheaper alternative to its CUDA platform could weaken its moat. Wells Fargo, with a market cap of US$251.7b, grew average loans 12% and average deposits 10% year over year in 2Q26 after the removal of its asset cap, while J.B. Hunt, with a market cap of US$21.3b and US$13.3b in revenue, recorded record intermodal volume of over 578,000 loads in Q2 2026.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.