️🇨🇳🇰🇵🇲🇾 An estimated $86 million in cryptocurrency has been stolen from users of Ledger hardware wallets in Southeast Asia following a suspected supply chain attack. The number of affected users is still unclear.

️🇨🇳🇰🇵🇲🇾 An estimated $86 million in cryptocurrency has been stolen from users of Ledger hardware wallets in Southeast Asia following a suspected supply chain attack. The number of affected users is still unclear.

The attack involved Ledger Nano X devices sold by CryptoBillis, an authorized Ledger reseller for over four years. The company was sold in March 2026 to a Chinese man from northern China, suspected of possible ties to North Korean hackers.

The devices were allegedly equipped with hidden tracking modules containing tiny 2x2mm SIM chips before reaching customers.

The implants can capture recovery phrases presented during wallet setup and transmit them to a third party, allowing attackers to empty the wallets. The modified devices could still pass Ledger's authenticity checks, leaving customers unaware of the extra hardware. The former owner of CryptoBillis revealed that the sale is subject to a six-month NDA, preventing disclosure of the ownership change to his hardware wallet partners.