Ledger said every verified loss of user funds linked to the recent hardware-wallet incident traces to devices sold by authorized reseller CryptoBilis, where a limited number of units contained unauthorized implants capable of capturing recovery phrases. Chainalysis said a task scammer lost 60 bitcoin worth about $4.8 million after thieves emptied three Ledger addresses on Oct. 9. Taylor Monahan said multiple other recent loss reports resulted from panic-driven social engineering, with scammers persuading users to enter 24-word recovery phrases into fraudulent websites or applications. Estimates for the broader episode range from $70 million to $100 million, including on-chain estimates of about $86 million to $93 million, although Ledger has not disclosed its own loss estimate.