Ledger Attack Linked to Up to $94.5M in Crypto Theft
A suspected Ledger supply-chain attack linked to authorized reseller CryptoBilis may have led to up to $94.5 million in losses across hundreds of wallets, according to blockchain analytics firms. Earlier estimates put losses at about $93 million across roughly 98 wallets; the figures remain unconfirmed by Ledger. Ledger said at least one affected device contained unauthorized hardware, but has not confirmed how recovery phrases or funds were compromised. Researchers have raised the possibility of a hidden module capturing recovery phrases, while phishing and pre-generated phrases have also been suggested.
Ledger advised customers not to initialize unused devices bought through CryptoBilis. Customers who initialized potentially affected devices should move their assets to a new wallet using a newly generated recovery phrase. Tether has frozen $10 million in USDT linked to the theft, and investigators are tracing the remaining funds. Some assets were reportedly swapped into USDD, while some ETH moved through Tornado Cash. The Ledger attack highlights risks in hardware-wallet distribution channels and may weigh on short-term confidence in crypto custody, although it does not indicate a flaw in the underlying blockchain networks.
Bearish
The direct price impact on BTC, ETH, USDT and USDD is likely limited because the incident concerns device distribution and custody, not a confirmed vulnerability in those assets’ underlying networks. However, the Ledger attack could create short-term risk aversion, prompt affected users to move or sell assets, and increase scrutiny of hardware-wallet providers. Such security incidents can add temporary selling pressure and volatility, particularly if losses continue to rise or funds are moved to exchanges. Tether’s reported $10 million freeze may help contain some of the stolen funds but does not remove concerns about the broader breach. Over the longer term, stronger device verification and custody practices could restore confidence; absent further evidence of systemic blockchain or stablecoin problems, a sustained market-wide price impact is not established.