Tether freezes $10 million as trackers put the Ledger reseller theft at $93 million across 315 wallets, and Ledger still gives no total

The money taken from owners of Ledger hardware wallets bought through CryptoBilis is now being counted, and some of it has been stopped. Bitquery, a blockchain analytics firm, has traced about $93.2 million drained from 315 wallets across six blockchains, including TRON, Bitcoin, Ethereum and Solana. About $70.5 million of it was taken on TRON, nearly all of it USDT (about 70.2 million).

Tether has blocked 37 addresses linked to the theft, Bitquery said, and 20 of them held the roughly $10 million of USDT that is now frozen. Some money left before the freeze took effect. Tether did not immediately respond to CoinDesk's request for comment. Bitquery also tracked about 2,990 ether sent into the Tornado Cash mixer.

Estimates differ because they rest on public blockchain data, not on figures from Ledger. YFarmX, a security research platform, counts about $103.4 million from 530 addresses, Unchained reported.

Ledger has confirmed that at least one affected device contained an unauthorized hardware implant. Its latest update says all confirmed cases trace to devices sold through CryptoBilis, a Southeast Asian reseller, and that its own systems and direct sales are unaffected. It has not said how many devices were altered, how, or how much was lost. Its advice stands: do not set up an unused CryptoBilis device, and move funds from a used one to a new device with a new recovery phrase.

Correction, October 12, 2026: An earlier version of this brief said about $70.5 million of the stolen funds was USDT on TRON. Bitquery gives $70.5 million as the total taken on TRON, of which about 70.2 million was USDT. It also described the frozen USDT as sitting in 20 of the drained wallets; Bitquery says it was held in 20 addresses linked to the theft.