-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0232
============================================================

Advisory-ID:  0xCERT-2026-0232
Severity:     Critical
Published:    2026-10-09T00:00:00.000Z
Updated:      2026-10-10T07:23:32.261Z
Chains:       Ethereum, Bitcoin, Other / Multi-chain
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0232

Title: Ledger CryptoBilis Reseller Supply-Chain Drain

Summary
- -------
An estimated $86 million was drained from Ledger users who bought devices from reseller CryptoBilis, in a suspected supply-chain attack that captured their seed phrases.

Details
- -------
Summary
An estimated $86 million was drained from Ledger users who bought devices from reseller CryptoBilis, in a suspected supply-chain attack that captured their seed phrases.

Incident
- - Victim: Ledger users (CryptoBilis)
- - Date (UTC): 2026-10-09
- - Estimated loss: $86.0M
- - Chain(s): Ethereum, Bitcoin, Tron
- - Attack type: private key compromise
- - Funds status: stolen

Recommended actions
- - If you use Ledger users (CryptoBilis), move funds to a fresh wallet with a new seed phrase once the vendor confirms the root cause
- - Update the wallet software only from official sources
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/ledger-cryptobilis-2026. Primary sources: https://news.bitcoin.com/security/ledger-investigating-86m-drained-crypto-hardware-wallets/ ; https://cryptopotato.com/ledger-investigates-86m-crypto-drain-as-reseller-supply-chain-fears-grow ; https://www.financemagnates.com/cryptocurrency/ledger-probes-reseller-supply-chain-as-analysts-track-80m-in-suspected-drains/ ; https://www.tftc.io/ledger-cryptobilis-reseller-86m-drained-funds.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/ledger-cryptobilis-2026
- - https://news.bitcoin.com/security/ledger-investigating-86m-drained-crypto-hardware-wallets/
- - https://cryptopotato.com/ledger-investigates-86m-crypto-drain-as-reseller-supply-chain-fears-grow
- - https://www.financemagnates.com/cryptocurrency/ledger-probes-reseller-supply-chain-as-analysts-track-80m-in-suspected-drains/
- - https://www.tftc.io/ledger-cryptobilis-reseller-86m-drained-funds

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrMIvgJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmcQTvCc7wQZi31AQwhsSAAccswUikfQcuUT5m/E
joQ9QRYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAADYSwD/TZWRjB8+YO8HQic/
CJJe9+E+mJHPiXn6O/1eRdyq5yoBAJdPp1eVkjtQc0uuRnAZsE/acj7gKSa4
KewKM/db3Y0F
=nPKo
-----END PGP SIGNATURE-----