Not Your Reseller, Not Your Coins

This article originally appeared in Galaxy Research's weekly newsletter. Subscribe to get timely insights delivered to your inbox every Friday morning.

WHAT HAPPENED

Ledger is investigating the theft of roughly $91 million from customers who bought its hardware wallets through CryptoBilis, a Southeast Asian reseller, after confirming that at least one of the devices sold contained a hardware implant that read the recovery phrase off the screen.

On Friday, Oct. 9, Ledger said it was investigating reports of lost funds from users in Southeast Asia who purchased devices through CryptoBilis, which Ledger's own site listed as an authorized reseller for Indonesia, Malaysia and the Philippines. Ledger asked the reseller to pause all sales and shipments and told anyone who bought from it in the past 90 days not to set up the device, or, if they already had, to move funds to a new device with a newly generated seed. The next day Ledger confirmed that "one of the impacted users' devices contained an unauthorized hardware implant," and on Tuesday it described how it works: a separate component inside the enclosure reads the screen during setup, captures the 24-word recovery phrase and sends it out over LTE through a provisioned eSIM. It leaves the Secure Element and Ledger's operating system untouched, which is why Ledger's Genuine Check passes on a tampered unit. Independent teardowns have found at least three generations of the implant, the latest a professionally fabricated flex circuit hidden under the display. Ledger says its own systems and direct sales channels were not compromised, that the volume is "limited," and that every confirmed case so far involves a device sold through CryptoBilis, which has suspended all hardware sales.

Onchain, the theft looks less like a run of individual victims than a harvest. By our count, roughly $91 million left 474 victim addresses across bitcoin, Ethereum, Arbitrum, Polygon and TRON: about $64.5 million in USDT and TRX from 146 TRON addresses, 213 BTC (about $17.6 million) from 279 bitcoin addresses, and $8.8 million of ETH and stablecoins from 49 Ethereum-type addresses. Trackers that also count BNB Chain, which we have not scoped, put it a little higher, at $93 million to $95 million; ours is a floor. The bitcoin sweeps began on Oct. 7, but 88% of the value, about $80 million, moved in a single hour starting at 05:00 UTC on Oct. 9, the morning of Ledger's first statement. Nearly all of the bitcoin victim addresses had never spent before. This was cold storage, most of it funded within the previous 90 days, though some addresses date to 2021, consistent with existing seeds being restored onto tampered devices.

As of Oct. 15, about $56.6 million is still parked at attacker-controlled addresses: roughly 208 BTC untouched at the bitcoin collectors, about 12,800 ETH (much of it bridged from TRON) and 7.5 million USDT in TRON relay accounts created the morning of the drain. About 5,400 ETH ($13.5 million) has gone through Tornado Cash, on the order of $2 million appears to have reached exchange deposit addresses, and Tether has frozen $10 million of USDT tied to the theft. At least one victim has resorted to writing to the thieves onchain, offering them a cut if they return the rest.

OUR TAKE

Two weeks ago in this newsletter, Thad Pinakiewicz wrote that nobody attacks the private-key math anymore; they attack whatever tells the math what to do. The Ledger reseller theft is the physical-world version of the same lesson. The Secure Element did its job. The seed was simply read off the screen by a chip that was not supposed to be there. Three things about it are worth dwelling on.

Cyber vulnerabilities in the age of AI. Last week Jianing Wu weighed the debate over whether AI will eventually break ECDSA. That is the wrong place to look for the near-term threat. Nothing in this quarter's losses required a mathematical breakthrough: a firmware build flaw at Coldcard, a verification-cache bug in Liquid, a compromised third-party security product at Bitget, and now a flex circuit and an eSIM. None of these incidents has been attributed to AI tooling, and we are not attributing them. But AI changes the economics of everything around the key. Frontier models now find real vulnerabilities in widely used code, and the window between a bug shipping and being exploited is collapsing: Hacken attributes 77% of third-quarter losses to vendor and developer tooling, disclosed-but-undeployed fixes, and infrastructure outside the audit scope. The same tools make the operation around an exploit cheap to run at scale: a plausible storefront, responsive "support," a backend that files away hundreds of recovery phrases and waits for the deposits to arrive. The implication for anyone building or holding in this industry is to assume that every dependency and every link in the supply chain is being probed continuously by adversaries who do not get tired, and to point the same automation at your own code, firmware and vendors before they do.

The particular risk of digital bearer assets. This is what a bearer asset looks like when custody fails. The property that makes bitcoin impossible to confiscate makes it impossible to claw back. There is no issuer to call, no chargeback, no court order that moves a UTXO. Of the $91 million taken, the only portion now under anyone's control but the thief's is the $10 million Tether froze, which is itself a reminder that USDT is not a bearer asset at all but a liability with an admin key. The 208 BTC resting at three bitcoin addresses is visible to the entire world and reachable by no one. A bank theft of this size would come with a task force; here, 474 addresses, most of them belonging to retail buyers in Southeast Asia, are reduced to pleading in OP_RETURN. None of this is an argument against self-custody. It is an argument that self-custody is an operational discipline rather than a product you buy. The device is one link; the supply chain that delivered it, the screen you trusted, the backup and the plan for your heirs are the others. Buy direct from the manufacturer. Treat any device that arrives set up, or with a pre-printed seed, as compromised. For balances you cannot afford to lose, spread keys across vendors and locations so that a single tampered device or buggy random number generator is a scare rather than a loss, and for institutions, use custody controls that assume any one device or vendor can fail.

A rough quarter for bitcoin's conservative infrastructure. Ledger closes out roughly ten weeks in which the "boring," bitcoin-native corner of the industry took hit after hit. On July 30, Coinkite disclosed that Coldcard firmware had been generating weak seeds since 2021; by our count more than 1,830 BTC (about $150 million at today's prices) has since been swept from more than 9,000 addresses. On Sept. 6, a bug in Liquid's Elements software let an attacker mint about 3,998 unbacked L-BTC and peg them out for real bitcoin, roughly $320 million at the time; the attackers, who styled themselves white hats, returned 3,400 BTC once Blockstream patched the bridge and kept about 600 BTC as a self-awarded fee. Bitget lost $387.5 million on Sept. 24 to a compromised third-party security product in an attack it attributes to North Korea, and NEAR Intents was hit for $3.8 million days after blocking the Bitget launderers. Third-quarter tallies from CertiK and Hacken land between $1.1 billion and $1.3 billion, and the Ledger theft arrived in the first week of the fourth quarter. What stands out is the profile of the targets. These were not unaudited DeFi contracts. Coldcard and Ledger are the two most trusted names in hardware self-custody, and Liquid is the most conservative sidechain in bitcoin, operated by a federation of long-standing bitcoin companies. In every case the cryptography held; the failure was in implementation, supply chain or operations. The response is the silver lining: within hours there were onchain tallies, Tether froze funds, NEAR Intents blocked flows, and the Liquid attackers negotiated onchain and returned 85%, a long way from the Mt. Gox era. But the lesson of the quarter is uncomfortable for anyone who assumed the bitcoin-native stack was the safe part.

Bitcoin's math had a great quarter. Everything wrapped around it did not.