Ledger reseller customers lose an estimated $94.5m

What happened

YFarmX’s investigation, updated on 11 October, estimates a $94.5m gross drain from 521 sending addresses associated with affected CryptoBilis customers. Ledger confirmed an unauthorised hardware implant in one impacted device; CryptoBilis stopped all hardware-wallet sales.

The estimate retains the investigation’s 9 October valuation basis. The 521 addresses comprise 136 on Tron, 326 on Bitcoin and 59 deduplicated EVM addresses. Several addresses can belong to one person. The 11 October update adds 47 Bitcoin addresses drained on the evening of 10 October. Ledger’s 10 October statement confirms an implant in one examined device; the wider investigation continues. Collector transfers and swaps move the same stolen assets and are excluded from additional loss counting.