🚨 Security Alert | Ledger Users Report Suspected Wallet Theft Exceeding $86M 💸 On October 9, multiple Ledger hardware wallet users in Southeast Asia reported unauthorized asset transfers involving devices purchased through CryptoBilis, a Ledger reseller. Public on-chain investigations estimate that more than $86 million may have been stolen across multiple networks, including Bitcoin, Ethereum, and TRON. Ledger has confirmed an ongoing investigation and requested that CryptoBilis suspend sales and shipments of Ledger devices. The exact number of affected users and total losses have yet to be officially confirmed. 🔍 Key Security Findings On-chain analysis identified coordinated asset transfers across multiple blockchains. Several TRON wallets submitted token approvals almost simultaneously, followed by rapid withdrawals. This pattern suggests that the attacker may have gained signing control over multiple wallets. The initial compromise remains unclear. Potential attack vectors include device tampering during distribution or delivery, and compromised recovery phrases. However, there is currently no confirmed evidence of an exploitable vulnerability in Ledger's firmware or hardware security mechanisms. ⚠️ Security Recommendations Ledger advises users who purchased devices through CryptoBilis within the past 90 days to take precautions: Unused devices: Do not initialize or use them until further notice. Initialized devices: Consider generating a new recovery phrase on a trusted device and transferring assets to a new wallet as soon as possible. Recovery phrase security: Never restore the original recovery phrase on the new device or share it with anyone. ✍️ BitsLab Security Reminder: Hardware wallet security depends on the entire lifecycle, from private key generation and device distribution to everyday use. If a recovery phrase may have been compromised, replacing the hardware wallet or reinstalling the wallet application will not eliminate the risk. Assets should be transferred to a wallet secured by a newly generated recovery phrase. The investigation is ongoing. The exact attack vector and total losses remain unconfirmed. #SecurityAlert #Web3Security #Ledger