A supply chain attack on Ledger devices purchased from Southeast Asian reseller CryptoBilis resulted in approximately $90 million in stolen cryptocurrency. Attackers implanted a hardware module to capture seed phrases displayed on-screen, targeting high-value wallets with an average loss of $890,000 each across roughly 98 victims who followed security best practices.
A post discusses a $93 million theft from Ledger involving a compromised supply chain. The incident was shared on X (formerly Twitter) by GREED Academy on October 10, 2026.