Ledger Clamps Down on Authorized Reseller Amid Crypto Wallet Hack, Cites Limited Scope
Key Summary
Ledger has clarified that all confirmed cases of the October 9 crypto theft incident were linked to devices purchased through CryptoBilis, its authorized reseller in Southeast Asia. The company's systems and direct sales channels remain unaffected, and it is working with authorities to investigate the thefts. The incident has resulted in estimated cryptocurrency losses of over $86 million.
Investigation Update
Ledger has released a statement regarding the ongoing crypto theft incident, confirming that all impacted devices were purchased through CryptoBilis, its authorized reseller in Southeast Asia. The company asserts that the volume of affected devices is limited, and its own systems and direct sales channels remain unaffected by the incident. Ledger is currently collaborating with relevant authorities to investigate the thefts and reaching out to affected customers.
Industry-Wide Implications
The incident has sparked concerns about potential tampering with wallets before they reach their owners. Ledger is taking steps to improve industry-wide anti-tampering protections, including reviewing its authorized reseller controls and enhancing hardware protections against physical tampering. The company is also urging other hardware wallet manufacturers and security researchers to follow suit.
Security Measures
CryptoBilis has temporarily suspended all hardware wallet sales, while Ledger is tightening its supply-chain security measures. The company is reminding its distributors to purchase products exclusively through authorized channels and refrain from reselling returned devices. Ledger's efforts aim to prevent similar incidents in the future and protect its customers' assets.