Binance Founder CZ Flags NDA Twist in $80M+ Ledger Wallet Hack

HACK OR EXPLOITBinance Founder CZ Flags NDATwist in $80M+ Ledger WalletHack58IMPORTANCECLOSED3NEWS MEDIA3PIECESOct 14, 2026 16:33blockboard.net

Ledger said one affected device contained an unauthorized hardware implant and said its systems were not breached, while also pausing reseller sales pending investigation. Separately, Ledger advised CryptoBilis buyers to keep unused wallets uninitialized and to move assets from already-set-up devices to a new device with a new recovery phrase.

What this rests on

Claim by claim, with its source
✓
CZ raised questions about an NDA tied to a Malaysian reseller’s ownership transfer in an investigation involving an $80 million-plus Ledger wallet theft.
✓
Bitquery said it traced $93.2 million in alleged losses across 315 wallets on six blockchains.
✓
Ledger told CryptoBilis buyers to leave unused wallets uninitialized and to move assets from already-set-up devices to a new device with a new recovery phrase.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Owners and buyers who use Ledger devices are the most immediate audience, because the guidance changes what they should do with wallets that have not been initialized and with devices that have already been set up. Anyone handling a device linked to CryptoBilis would notice that Ledger’s instructions now point to moving assets to a fresh device with a new recovery phrase.

In practice, the situation narrows what can safely be done with some devices and reseller channels, because Ledger said one device had an unauthorized hardware implant and that reseller sales were halted pending investigation. At the same time, Ledger’s denial of a breach to its own systems means the devices and the company’s systems are being treated separately in the public record.

Market reaction

BT Bitcoin it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
-0.08 % before publication
+0.29 % after
$81,634price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 14 16:30
The Coin Republic scoop
Breaks the event: $93.2M and $80M
+10 h 24 m
Oct 15 02:53
The Defiant context
Its angle: uninitialized, defiant, should
+19 h 11 m
Oct 15 11:40
crypto.news context
Its angle: suspended, attackers, tightens

Thefts of a similar size

WhenWhat happenedFigure
1.3 years ago Nobitex · Malware incident $82M
2.8 years ago Orbit Bridge · Signature Verification Flaw incident $81.7M
4.5 years ago Fei Protocol & Rari Capital incident $80M
4.7 years ago Qubit · Missing Input Validation incident $80M
5.9 years ago Compounder.Finance · Project owner internal operations incident $80M

4197 incidents stored · 90 were as large as this one or larger ($80M)