Ledger spyware scare spreads beyond Southeast Asia

HACK OR EXPLOITLedger spyware scare spreadsbeyond Southeast Asia30IMPORTANCECLOSED2NEWS MEDIA3PIECESOct 12, 2026 12:58blockboard.net

Ledger’s investigation into tampered hardware wallets has widened beyond the initial Malaysia-based reseller and reached sellers in multiple Asian markets, while MediaMarkt Saturn stopped selling the devices in stores and online. The earlier case tied to CryptoBilis, which involved more than $86 million in losses, remains part of the broader picture, and new coverage adds that Ledger has also asked resellers and distributors in Hong Kong and Southeast Asia to halt sales.

What this rests on

Claim by claim, with its source
✓
More cases of Ledger wallets allegedly fitted with physical spyware were identified across Asia, Europe, and South America.
✓
Ledger hardware wallets were no longer for sale at MediaMarkt Saturn, both in stores and online.
✓
Ledger asked sellers in seven Asian markets to stop selling its devices as its investigation reached beyond a single reseller.
✓
Ledger users who bought hardware wallets from Malaysia-based reseller CryptoBilis lost more than $86 million last week.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Users and buyers who already hold Ledger devices, along with resellers in Hong Kong and Southeast Asia, are the people most directly affected today. The most concrete change is that some sellers have been told to stop selling the devices, while other outlets such as MediaMarkt Saturn have already removed them from sale in stores and online.

Market reaction

BT Bitcoin it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
-0.68 % before publication
+0.02 % after
$82,744price at publication
11series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 12 12:55
Protos scoop
Breaks the event: $86M
+1 d 21 h
Oct 14 10:32
Unchained context
Its angle: investigation, electronics, newsletter; with quotes
+1 d 23 h
Oct 14 12:01
Protos context
Its angle: responsible, ishopchangi, cryptoking

Other recent incidents

WhenWhat happenedFigure
2 days ago KolanHook (1.279453 ETH) incident no figure in dollars
3 days ago UNCX Network V2 · Incorrect Share Accounting incident $86k
3 days ago Pirate Chain · Transaction validation vulnerability incident $10.7M
4 days ago Gamdom · Hot wallet server compromise incident $4.2M
7 days ago Papertrade · Price manipulation incident $1.3M

4200 incidents stored