The Ownership, Trust Collapse, and Distressed Value of Ledger Ledger SAS, the French maker of the world’s best-known cryptocurrency hardware wallets, is a privately held company. Founded in 2014 it has no single controlling shareholder. Equity is divided among the founding team and employees (who retain a meaningful stake) and a broad set of institutional investors. Major backers from successive funding rounds include 10T Holdings, Digital Currency Group, Samsung Ventures, Morgan Creek Capital Management, Korelya Capital, Molten Ventures, True Global Ventures, and Cathay Innovation. The company last raised primary capital around 2023 at a valuation of roughly $1.3–1.5 billion and later explored a U.S. IPO that some reports pegged near $4 billion before pausing those plans. Pascal Gauthier has served as Chairman and CEO since 2019. In October 2026 that ownership structure and valuation faced a sharp stress test. Users who had purchased Ledger devices through CryptoBilis, an authorized reseller operating in Indonesia, Malaysia, and the Philippines, reported drained wallets. On-chain researchers estimated losses between roughly $86 million and $102 million across several hundred addresses. Ledger confirmed that at least some of the affected devices contained unauthorized physical implants—small hardware components capable of reading the recovery phrase from the device screen during setup and transmitting it over a cellular network. The reseller had changed ownership earlier in the year. Ledger stated that its own manufacturing, secure elements, software, and direct sales channels showed no evidence of compromise, and it instructed CryptoBilis to halt sales. The incident was therefore a reseller-level physical supply-chain attack rather than a breach of Ledger’s core product or systems. Nonetheless, the fact that an “authorized” channel could deliver spyware-laden devices under intact packaging struck at the central promise of hardware wallets: that private keys remain offline and under the user’s exclusive control. A parallel event earlier in 2026 at Coldcard (Coinkite) underscored that the category is not immune. A multi-year firmware bug had caused certain Coldcard devices to generate seeds with far weaker entropy than intended, allowing attackers to brute-force private keys offline. Losses were estimated in the $100–130 million range. Unlike the Ledger case, this was a software defect rather than physical implants, yet both episodes produced the same market reaction: eroded confidence that the security model holds from factory to end user. For a company whose entire brand rests on trust, the combined effect is material. Prior valuations reflected Ledger’s large installed base, leading market position, and recurring software revenue. In a firesale or distressed context—where a buyer underwrites reputational damage, potential liability, customer churn, remediation costs, tighter supply-chain controls, and regulatory scrutiny—those marks become unreliable. A realistic distressed equity range sits substantially lower, on the order of $300–800 million, depending on how cleanly the problem remains contained to one reseller, the company’s cash position, the durability of its revenue, and a buyer’s confidence that controls can be strengthened. Strategic acquirers or specialist private equity might still see residual value in the technology, user base, and brand if remediation is credible; pure financial buyers would demand a deeper discount. The episode illustrates a structural vulnerability that ownership structure alone cannot solve. Founders and venture investors can align incentives and fund growth, but they cannot eliminate the attack surface that appears once devices leave the factory and pass through third-party channels. Both the CryptoBilis implants and the Coldcard entropy failure show the limits of that model once trust is called into question.