Monday, October 12, 2026
Industry / Security

Tether freezes $10 million as trackers put the Ledger reseller theft at $93 million across 315 wallets, and Ledger still gives no total

Kuala Lumpur, Malaysia, at dusk. CryptoBilis was listed as an authorized Ledger reseller in Malaysia, Indonesia and the Philippines. File photo. Photo: Wikimedia Commons (CC0)

The money taken from owners of Ledger hardware wallets bought through CryptoBilis is now being counted, and some of it has been stopped. Bitquery, a blockchain analytics firm, has traced about $93.2 million drained from 315 wallets across six blockchains, including TRON, Bitcoin, Ethereum and Solana. About $70.5 million of it was USDT on TRON.

Tether has frozen about $10 million of USDT held in 20 of the wallets, Bitquery said, after blocking 37 addresses linked to the theft. Some money left before the freeze took effect. Tether did not immediately respond to CoinDesk's request for comment. Bitquery also tracked about 2,990 ether sent into the Tornado Cash mixer.

Estimates differ because they rest on public blockchain data, not on figures from Ledger. YFarmX, a security research platform, counts about $103.4 million from 530 addresses, Unchained reported.

Ledger has confirmed that at least one affected device contained an unauthorized hardware implant. Its latest update says all confirmed cases trace to devices sold through CryptoBilis, a Southeast Asian reseller, and that its own systems and direct sales are unaffected. It has not said how many devices were altered, how, or how much was lost. Its advice stands: do not set up an unused CryptoBilis device, and move funds from a used one to a new device with a new recovery phrase.

This story is reporting and analysis. It is not financial, legal or tax advice.