$93M Gone: Ledger Just Told Thousands of Buyers Their Wallets Are Compromised

$93M Gone: Ledger Just Told Thousands of Buyers Their Wallets Are Compromised

Up to $93 million has been drained from hardware wallets sold through CryptoBilis, and Ledger is now telling every buyer of those devices one thing: stop using them immediately.

The incident is one of the most alarming supply chain attacks in crypto hardware history. Wallets distributed through CryptoBilis were reportedly tampered with before they ever reached customers' hands, meaning buyers thought they were holding the gold standard of cold storage security while attackers already had the keys.

How a Tampered Box Became a $93M Nightmare

This is not a software exploit. This is not a phishing link you accidentally clicked. This is physical tampering at the supply chain level, which makes it exponentially more dangerous because most victims had no reason to suspect anything was wrong.

The compromised devices likely came pre-loaded with manipulated firmware or altered seed phrase generation, a method that gives attackers full access to every wallet created on the device from day one. Victims believed they were securing their assets. In reality, they were handing them over.

Ledger has confirmed the issue is tied to the CryptoBilis distribution channel and has urged all buyers from that source to treat their wallets as fully compromised. Any funds still sitting in those wallets should be considered at immediate risk.

Why This Is Bigger Than One Hack

The crypto community has spent years warning users about phishing, rug pulls, and exchange collapses. Supply chain attacks on hardware wallets have been the nightmare scenario that rarely happened at scale. Until now.

Between $86 million and $93 million drained across affected wallets is not a rounding error. It is a coordinated, patient operation that required infiltrating a distribution network, physically modifying devices, repackaging them convincingly, and then waiting for wallets to fill up before draining them.

This raises immediate questions about every third-party hardware wallet reseller in the market. If it happened here, it can happen elsewhere.

What Crypto Holders Need to Do Right Now

If you bought a Ledger device anywhere other than Ledger's official website, pay attention. Verify your purchase source immediately. If you used CryptoBilis, stop transacting and move your funds to a wallet generated on a trusted, verified device before doing anything else.

More broadly, this is a moment to audit where your hardware came from. Amazon listings, third-party resellers, and marketplace sellers all carry risk that the official store does not.

Watch for Ledger's official communications closely over the next 48 hours. A full list of affected serial numbers or batch codes could be the difference between securing your funds and losing everything.

Cold storage is still the safest option in crypto. But only if the hardware was never touched by someone else first.