- Ledger asked resellers in Hong Kong and several Southeast Asian countries to stop selling its devices after a spyware-linked $86 million hack.
- The company suspended Malaysian reseller CryptoBilis and is investigating supply-chain tampering.
- Rival Trezor cut resellers out of caution, saying no evidence its devices were compromised, though tampered units appeared via unauthorized sellers.
This week, Ledger, the crypto wallet maker, asked resellers and distributors in Hong Kong and across Southeast Asia to halt sales of its devices, expanding its response to a supply-chain attack tied to an $86 million cryptocurrency hack. The request followed the company’s suspension of its official Malaysian reseller CryptoBilis last week, after devices sold through that company were found to contain spyware, according to an X post from Ledger.
The expanded suspension covers Malaysia, Indonesia, Singapore, Thailand, the Philippines, Vietnam, and Hong Kong. Affected sellers include LazMall, Shopee, N-Crypt, Tokopedia, Challenger, Metapod, Ishopchangi, Pantrade, Dot Life, JIB, B2S, SiamBC, Bitkub, GROOV, RTB, CryptoKing, BitcoinVN, Digibit, Fortress, HKTVMALL, CK Artisans, OOOSH, and Crypto HK, according to Ledger’s reseller page.
Consequently, Ledger’s German reseller MediaMarkt also suspended sales this week. “It’s a sensitive, ongoing investigation and we will communicate more when we have more to share,” Ledger told Protos, redirecting to its recent X statement.
Meanwhile, rival wallet firm Trezor has also reduced its reseller network out of caution following the draining incident. “There is not a single piece of evidence that Trezor devices have been compromised,” the company said, noting the decision was precautionary.
However, some tampered Trezor wallets have surfaced through unauthorized vendors on Facebook Marketplace and TikTok Shop, as reported by Zetter Zero Day. Some X users have challenged Trezor’s “no evidence” claim, while others have suggested Trezor is part of the ongoing hack.
Trezor claims these examples likely refer to a case flagged in 2022, in which unofficial sellers “replaced the MCU itself rather than adding an implant to a genuine device.” Trezor also revealed that it had stopped working with CryptoBilis.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
