CryptoBilis Suspends All Channel Hardware Wallet Sales in Malaysia, Philippines, and Indonesia
Hardware wallet distributor CryptoBilis announced that it has temporarily suspended the sale and shipment of all brands of hardware wallets through its stores and online channels in Malaysia, the Philippines, and Indonesia, and has closed its physical stores until further notice.
This move is a precautionary measure aimed at protecting customers. The background is that Ledger is investigating reports of financial losses from Southeast Asian users who purchased devices from this distributor. Ledger has requested CryptoBilis to suspend the sale and shipment of its Ledger devices, stating that its own systems, infrastructure, and services are unaffected.
CryptoBilis stated it will engage independent experts to review its business processes and expects to provide further updates within three working days. For orders that have not yet been delivered, the company will proactively contact the relevant customers, and customer service remains operational.
CryptoBilis is an official authorized distributor of Ledger, covering Malaysia, the Philippines, and Indonesia, and also sells other brands of hardware wallets such as Trezor, SafePal, and Tangem. The company was founded around 2020 and is headquartered in Malaysia.
Ledger advises users who purchased devices from CryptoBilis in the last 90 days not to set up their devices if they have not been initialized; if they have been set up, consider transferring assets to a new device using a new mnemonic phrase. On-chain researchers estimate that the related suspicious losses exceed $86 million, involving hundreds of addresses and multiple chains, but Ledger has not confirmed the specific amount or cause.
Users who purchase Ledger devices should read the customer announcement from CryptoBilis and Ledger's official security announcement, and should never disclose their mnemonic phrases or PIN codes to anyone, nor click on links requesting to connect wallets, input mnemonic phrases, or install software. Some observers suspect there may be issues at the supply chain or device level, but the cause has not yet been definitively confirmed.
Funds have been concentrated in wallets of users who purchased devices from this distributor being emptied, with the beneficiaries not yet identified. The impacted parties include the trust in the relevant distributor channels, overall hardware wallet sales, and customer confidence in offline and authorized channels. Users who purchased directly from Ledger have not reported similar issues.
Source: Public Information
ABAB AI Insight
Ledger has previously faced multiple phishing, fake application, and supply chain-related risk incidents, including a fake Ledger Live application in April 2026 that resulted in losses of about $9.5 million. CryptoBilis, as its authorized distributor in Southeast Asia, was established around 2020 and entered Ledger's official distributor list, with a change of ownership occurring in March 2026, where the original shareholders exited operations and 100% ownership was held by Jiaming, registered in Heilongjiang Province, China.
The authorized distributor model grants distribution rights to third parties to expand regional coverage and reduce direct sales costs. This sales suspension involves all brands rather than just Ledger, indicating that the distributor is proactively expanding the isolation range, while Ledger's investigation focuses on a single channel rather than its own production or firmware. Resource mobilization is concentrated on suspending shipments, requiring users to migrate assets, and independent expert reviews of distributor processes.
Similar cases include historical issues with authorized channels for other hardware wallets or consumer electronics, such as risks of intermediaries implanting or replacing products. The current hardware wallet industry is transitioning from "official direct sales + authorized distribution" to a stricter phase of channel traceability and user self-verification.
Essentially, this is a restructuring of the industry chain: the security of hardware wallets highly depends on the integrity of the complete chain from factory to user. When reports of financial losses arise at the authorized distributor level, manufacturers cut risks by suspending a single channel and requiring users to migrate assets, while distributors expand the suspension range for self-protection. The mechanism is that once a private key is compromised through pre-modification of an offline device or a mnemonic phrase is leaked before setup, any subsequent software security becomes ineffective, forcing the industry chain to shift from "trusting authorized channels" to "user-side mandatory verification and rapid isolation."
ABAB News · Cognitive Laws
Channels are both entry points and vulnerabilities
Offline does not equal safe; delivery is the boundary
Suspending sales is a stopgap, not a diagnosis