Ledger reseller customers lose an estimated $103.4m

What happened

YFarmX’s investigation, updated on 12 October, estimates a $103.4m gross drain from 530 sending addresses associated with affected CryptoBilis customers. Ledger confirmed an unauthorised hardware implant in one examined device; the wider investigation continues.

The estimate retains the investigation’s 9 October valuation basis. The 530 sending addresses comprise 145 on Tron, 326 on Bitcoin and 59 deduplicated EVM addresses. Several addresses can belong to one person. The 12 October update identifies nine additional Tron addresses that sent 8,806,905 USDT on 9 October. The discovery date is later than those transfers. Collector transfers and swaps move already counted assets and are excluded from additional loss counting.