Binance co-founder Changpeng Zhao issued a warning to Ledger hardware wallet users to stay vigilant, particularly those who have purchased devices recently. He stated that, based on current information, the incident seems to be limited to the supply chain, involving one supplier, and a few individuals may have received counterfeit or tampered Ledgers.

Zhao noted that Ledger is a historically significant and secure hardware wallet brand in the industry, having stood the test of time, but such incidents can still occur. He expressed hope and belief that participants in the BNB ecosystem and the entire industry would assist in tracking and recovering funds. The Block also recorded his additional comment: self-custody comes with extra responsibility. The post referenced an investigation statement from Ledger's support account at 1:32 PM.

Ledger's statement mentioned that they are investigating fund losses for users in Southeast Asia, with relevant purchases made from the distributor CryptoBilis, which was misspelled as CryptoBillis in one instance. Before the investigation results are released, the company has requested the distributor to suspend all sales and shipments. Users who purchased within the last 90 days and have not initialized their devices should not set them up; those who have already set them up should consider transferring their assets to a new Ledger signing device and using a new recovery phrase. CryptoBilis is listed as an official distributor in Indonesia, Malaysia, and the Philippines.

The estimated loss amount is still being assessed. Tanuki42 reported at 12:00 PM that it exceeded $72 million and is still increasing, listing 8 addresses. Specter raised the estimate to over $86 million at 12:24 PM, covering Bitcoin, Ethereum, and Tron, initially mentioning hundreds of wallets but later clarifying that the actual number is unknown, expanding the list to 10 addresses. Decrypt cited Arkham's breakdown of approximately $42 million in Ethereum, $17.6 million in Bitcoin, and $16.5 million in Tether. Ledger has not confirmed the total amount, and Decrypt noted that tampering has not yet been verified.

Zhao's assessment includes two additional steps compared to the official statement. The official statement only mentioned investigating one distributor and suspending sales, while he framed it as a supply chain attack involving counterfeit or tampered devices. Both descriptions point to a single supplier, and neither has disclosed device serial numbers or confirmed lists.

This is not a token trade, but a recovery request. The buyers are the BNB ecosystem and industry tracking parties he named, while the sellers are the funds that have already entered the receiving addresses. The incident was triggered by Ledger's suspension announcement and his retweet. The beneficiaries are buyers who have not initialized their devices or have migrated assets using a new recovery phrase within the last 90 days; the pressured parties are buyers from CryptoBilis who have completed setup, as the $86 million has not been confirmed by the company, and the counterfeit or tampering has not been officially verified.

The post confines the scope to one supplier while placing the recovery responsibility on ecosystem participants. The official channel remains Ledger's support account, not this retweet.

Source: Public Information