Ledger has urged its users to take emergency action following widespread reports of an $86 million exploit circulating across media outlets. This proactive stance marks a critical escalation from the hardware wallet manufacturer, following earlier reports of massive losses that emerged without direct instructions for device owners.
What makes the warning especially urgent is not just the size of the reported losses, but evidence that user balances continue to be drained in the wild.
8-Year Secure Wallet Loses 59 ETH
On-chain analytics platform Lookonchain revealed a real-world case involving an affected holder. The victim lost 59 ETH, valued at approximately $146,800, from a wallet address that had remained secure for eight years.
The user had recently resumed activity and generated a new wallet address after four years without transactions. The malicious CryptoBillis Ledger Drainer swept the newly created wallet clean moments after it was generated.
Vulnerability Traced to Reseller Channel, Not Physical Hardware
While the attack is closely tied to the Ledger ecosystem, it does not mean hackers breached the hardware wallet’s built-in security systems. Instead, the root issue stems from distribution channels and an unauthorized reseller operating under the name CryptoBillis, which compromised units before they reached buyers.
The circulation of compromised units through unauthorized vendors was previously detailed in an earlier report titled ‘Buying Ledger From Unofficial Stores - $90M in User Funds Drained via CryptoBillis Reseller Devices’. The latest update marks a new escalation, with Ledger directly stepping in to advise users on protective measures.
Why Do Loss Figures Differ?
Public estimates regarding the total stolen funds vary across sources. Yahoo Finance Singapore reported the exploit at around $86 million, while earlier reports estimated total losses reaching $90 million.
The discrepancy is due to differing reporting timelines and calculation methodologies used by each party. To date, Ledger has not released official figures detailing the exact total losses tied to the CryptoBillis network.
For crypto investors, the incident underscores that hardware wallets offer little protection if the supply chain is compromised from the start. Purchasing directly through official channels remains the most fundamental safeguard before entrusting years of savings to a storage device.
Reported by Yahoo Finance Singapore.
Read also: XRP Ledger Overflow Bug Briefly Opened Exploit to Mint Illegal Coins - Needed Only Hundreds of XRP
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
