Ledger $93 Million Exploit: Investigation Focuses on CryptoBilis Reseller

Ledger has asked Southeast Asian reseller CryptoBilis to halt device sales and shipments as it investigates wallet losses that Bitquery estimates at $92.9 million across 311 wallets. The reported $93 million Ledger exploit came to light on October 9, 2026, but the available evidence does not establish a breach of the hardware wallet maker’s core infrastructure.

Key takeaways

• Ledger’s investigation centers on devices purchased through CryptoBilis.
• Bitquery’s loss estimate spans five blockchain networks.
• Ledger issued precautions for CryptoBilis purchases made within the previous 90 days.
• Blockchain tracing and forensic analysis remain underway.

U.Today reports that CryptoBilis holds official distributor status across Indonesia, Malaysia and the Philippines. Ledger’s response focuses on customers who bought hardware wallets through that reseller.

Tracing Ledger’s reported $93 million exploit

Bitquery calculated the reported losses across Bitcoin, Ethereum, TRON, BNB Chain and Polygon. Its estimate followed initial figures above $72 million and a separate assessment by blockchain investigator Specter that put losses above $86 million.

Specter traced suspicious addresses receiving funds from hundreds of wallets on Ethereum, TRON and Bitcoin. According to Bitquery’s analysis, small test transfers took place for roughly two weeks prior to the main outflows, after which coordinated movements occurred across multiple networks.