Ledger Users Reportedly Drained of Over $86 Million Across Several Blockchains

Ledger Users Reportedly Drained of Over $86 Million Across Several Blockchains

A wave of wallet drains targeting Ledger hardware‑wallet users has been reported, with losses that may exceed $86 million across Ethereum, TRON, and Bitcoin. The incident centers on a Southeast Asian reseller, CryptoBillis, and has prompted Ledger to pause sales and advise affected customers to take immediate action.

How the Drain Unfolded

On October 9, 2026, security researcher @SpecterAnalyst posted on X that a set of theft addresses had siphoned more than $86 million from Ledger users’ wallets. The addresses, listed in a public thread, had received funds from hundreds of victims across multiple chains. While the addresses themselves held only about $25 million at the time of the post, the rest of the stolen assets had already been moved.

A parallel post from user tanuki42, later echoed by the Security Alliance (SEAL), highlighted the same addresses and urged anyone who had been drained to contact SEAL 911 via Telegram. The SEAL post confirmed the scale of the theft, noting a total loss of over $72 million that was still increasing.

Ledger’s Response

Ledger’s official support account announced that it was investigating reports of lost funds from users who purchased devices through CryptoBillis. The company asked the reseller to halt all sales and shipments pending the investigation’s outcome. Ledger also issued a caution to customers who had not yet set up their devices: do not proceed with the initial setup. For users who had already configured a device, Ledger recommended moving all assets to a new signer with a fresh seed phrase.

Ledger’s statement did not reference the $86 million figure or the specific addresses mentioned in the security community’s posts. Instead, it focused on the reseller’s role and the steps users should take to protect their holdings.

What Users Should Do Now

1. Verify the Reseller – If you bought a Ledger device from CryptoBillis or a similar reseller, pause any use of the device.
2. Check Your Wallet – Use a blockchain explorer to confirm whether your wallet address appears on the publicly listed theft addresses.
3. Move Assets – If you have already set up the device, transfer all funds to a new wallet with a new seed phrase.
4. Report the Incident – Contact Ledger support and, if applicable, SEAL 911 through the Telegram bot to report any losses.
5. Stay Informed – Follow Ledger’s updates on X and the official support channels for the latest guidance.

The Bigger Picture

This incident underscores the importance of secure supply chains for hardware wallets. Even a single compromised reseller can expose thousands of users to theft. The crypto community’s rapid sharing of addresses and coordination with security groups like SEAL demonstrates how collective vigilance can help mitigate damage. Ledger’s swift action—halting sales and advising users—shows a proactive stance, but the full scope of the loss remains unclear.

Bottom Line

If you bought a Ledger device from CryptoBillis or a similar reseller, pause usage, verify your wallet, and consider moving your assets to a new signer. Stay alert to Ledger’s updates and report any suspicious activity.

---

TL;DR: Ledger users who bought from reseller CryptoBillis may have lost over $86 million; Ledger is pausing sales and advising affected customers to halt setup and move assets to a new wallet.