Ledger drains: the $86 million figure is an analyst estimate, and the cause is still unconfirmed

Ledger said on Friday, October 9, that it is investigating reports of fund losses among customers in Southeast Asia who bought its hardware wallets from the reseller CryptoBilis, according to The Block. Several Bitcoin videos since then have flatly stated that Ledger "was not hacked" and that a supplier tampered with devices. That may turn out to be right. It is not yet established.

What is confirmed

• Ledger is investigating reports from users who bought through CryptoBilis, which The Block says is listed as an official reseller in Indonesia, Malaysia and the Philippines.
• Ledger asked CryptoBilis to pause all sales and shipments.
• Ledger told buyers from the last 90 days not to start setting up a device. Those who already did were advised to consider moving assets to a new signer with a new seed.

What is not

The headline number, $86 million, is not a Ledger figure. It comes from the on-chain researcher Specter, who traced funds sent to addresses on Bitcoin, Ethereum and Tron. Another researcher, tanuki42, put it above $72 million. The Block reports that nobody has verified either number, that it is unclear whether the two cover the same transactions, and that Specter later said the number of affected wallets is not yet known. Ledger has not confirmed a loss total or a victim count.

The cause is also open. Former Mt. Gox chief Mark Karpeles has said resold devices may have been tampered with, a claim The Block labels unverified. Changpeng Zhao said available information pointed to a supply-chain attack involving one vendor. Security researcher Taylor Monahan warned, per Protos and other coverage, that the panic was making people think there was a zero-day flaw in Ledger's products when none appears to exist.

What it means for holders

If the supply-chain explanation holds, the weak point is where the device was bought, not the cryptography inside it. That is why the standard advice is to buy hardware wallets only from the manufacturer, and to generate your own seed phrase on the device rather than accept one printed on a card. Ledger's own instruction, for people who bought from this one reseller within 90 days, is to move funds to a fresh seed. Nothing published so far suggests devices bought elsewhere are affected.

For the market, the episode is a security story, not a price story. Bitcoin was at about $82,400 on Coinbase on Monday morning, near where it traded before the news.

Sources: The Block; Protos; Bitcoin Magazine; Coinbase Exchange API. Information, not investment advice.