CZ warns of supply chain attack risks for Ledger hardware wallets, with a single distributor suspected of selling counterfeit or tampered devices.

CZ issued a post warning Ledger hardware wallet users to remain vigilant, especially those who purchased devices recently. Based on available information, the incident appears limited to the supply chain, involving one vendor, with a small number of users possibly purchasing counterfeit or tampered Ledger devices. CZ stated that Ledger is a long-standing, highly secure hardware wallet brand in the industry, but such incidents can still occur. He called on the BNB ecosystem and the entire crypto industry to assist in tracking and recovering the stolen funds. Earlier, Ledger confirmed it is investigating a fund theft incident involving users in Southeast Asia, where affected users purchased devices via reseller CryptoBilis. Ledger has ordered CryptoBilis to suspend sales and shipments, and advised users who bought devices through the reseller in the past 90 days not to initialize their devices for now; if setup is already complete, they should create a new Ledger signing device using a new mnemonic phrase and transfer their assets to the new wallet. On-chain investigator Specter estimates the incident has led to the theft of hundreds of wallets across Bitcoin, Ethereum, and Tron networks, with losses exceeding $86 million. Security researcher tanuki42 previously estimated losses have surpassed $72 million, noting the figure is still rising. At present, the specific cause of the incident and whether the involved devices have security vulnerabilities remain unconfirmed pending investigation.