Ledger wallet implants linked to roughly $100 million in thefts, including 60 Bitcoin from a task scam

  • Chainalysis linked more than 60 stolen Bitcoin to three Ledger addresses controlled by a task-scam operator.
  • More than 60 Bitcoin, worth about $4.8 million, was drained from the three wallets.
  • Ledger said CryptoBilis devices contained implants that captured recovery phrases during setup.

Tampered Ledger devices have been linked to roughly $100 million in crypto thefts, including more than 60 Bitcoin worth about $4.8 million that a task-scam operator had moved into three wallets. Blockchain analytics firm Chainalysis said the scam proceeds entered the Ledger addresses on September 22, 2026, before all three were drained in single transfers to the same wallet on October 9. Ledger later disclosed that devices sold through Southeast Asian reseller CryptoBilis contained hardware implants capable of capturing 24-word recovery phrases and transmitting them over LTE through embedded eSIMs. Estimates from Specter and Santiment put losses from compromised devices above $86 million and around $90 million, respectively, while Ledger has not confirmed those totals; a separate account in the existing investigation estimates roughly $100 million, compared with Bitquery's earlier $102 million across 324 wallets on six networks. SEAL 911 investigator Jonty helped identify coordinated drain patterns, leading to a Tether-supported freeze of $10 million in stolen USDT. The incident has raised wider questions about hardware-wallet supply chains, including devices sold through authorized retailers, while Bitcoin's network and market showed no direct disruption.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.