A trader reportedly lost 80 Bitcoin worth about $6.6 million in a single transfer on October 9, after the coins had been held in a new Ledger wallet for 10 days. The reported timeline is supported by public Bitcoin transaction records, but it does not establish how the wallet was compromised. Ledger is investigating separate loss reports involving customers who bought devices through Southeast Asian reseller CryptoBilis.
14
15
21
The reported 80 BTC timeline
Blockchain reporting says the trader acquired 80 BTC for about $5.2 million, at roughly $65,000 per coin, around four months before the theft. The position had at one point shown an unrealized gain of about $1.38 million.
37
38
The 80 BTC were reportedly deposited into the new Ledger wallet on September 29. A single transfer took them out on October 9 at 05:54 UTC; at the time, the coins were valued at about $6.6 million. Those figures describe the reported transaction and market value, not a confirmed explanation for the loss.
14
Ledger’s response and guidance for recent buyers
Ledger said it was investigating reports of lost funds from customers in Southeast Asia who bought devices through CryptoBilis, and asked the reseller to pause Ledger-device sales and shipments. Ledger advised customers who bought from the reseller in the previous 90 days not to set up an unused device. People who had already set one up were advised to consider moving assets to a new signer with a newly generated recovery phrase.
2
3
13
Reports describe CryptoBilis as an authorized Ledger reseller serving Indonesia, Malaysia and the Philippines. Some coverage spells the name “CryptoBillis.”
1
13
17
Wider reports are not a confirmed loss total
Investigators’ estimates of suspected losses reportedly rose from more than $72 million to more than $86 million across Bitcoin, Ethereum and Tron. Later reporting put the suspected total near $90 million and said Tether froze USDT linked to the suspected thefts. These are investigator estimates and reports about linked funds—not an aggregate loss figure confirmed by Ledger.
2
9
20
Some coverage also mentions a separate theft of roughly 7 million USDT involving a buyer connected to the reseller. That report has not been confirmed by Ledger, and it should be treated as an allegation rather than an established part of a verified total.
47
The cause remains unknown
Changpeng Zhao warned that counterfeit devices or a supply-chain compromise were possible explanations. That warning is not proof that either occurred. The available reporting does not establish whether the issue involved a device, a recovery phrase, software or another factor; Ledger had not confirmed a cause or the total losses in the reports cited here.
23
3
21
A separate claim about an August Coldcard firmware incident involving roughly $70 million in stolen Bitcoin is not substantiated by the reporting cited here. It should not be treated as a verified precedent or as evidence about the CryptoBilis investigation.