Ledger incident losses near $90 million as Tether freezes linked USDT, MistTrack says
Former Mt. Gox CEO Mark Karpelès has asked Ledger users affected by reported fund losses to help investigate possible hardware tampering.
Nearly $90 million in losses have been tracked in connection with the Ledger security incident, while Tether has frozen USDT held at addresses linked to the case, according to blockchain tracker MistTrack.
We’re seeing @tether freeze a significant number of $USDT across addresses linked to this incident.
Based on our current tracking, the reported losses are approaching $90 million. Some affected users have contacted us for assistance, and our team is actively following up on… https://t.co/KDffyMx1fv pic.twitter.com/IvOwCu655C
— MistTrack🕵️ (@MistTrack_io) October 9, 2026
The incident surfaced this morning after on-chain analyst Specter said wallet-draining attacks reported by Ledger users on X and Reddit may have resulted in more than $86 million in losses.
Specter said they traced the addresses receiving the stolen funds and identified inflows from hundreds of victim wallets across several major blockchains, including Ethereum, TRON and Bitcoin.
Ledger said it is investigating the case, which reportedly affected customers in Southeast Asia who purchased its hardware wallets through reseller “CryptoBilis.” The company has also asked “CryptoBilis” to suspend all sales and shipments of Ledger devices while the investigation is underway.
MistTrack said some affected users had contacted its team for assistance and that it was actively following up on their cases.
The news moving money, markets, and the world—before your day starts.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
Concerns over possible Ledger hardware tampering
Mark Karpelès, the former CEO of Mt. Gox, said the Ledger security incident appeared potentially connected to an issue he was investigating.
Days before the case came to light, he warned users about buying Ledger hardware wallets from suspicious sellers and alleged that tampered devices could contain a surveillance implant with a SIM card.
In a follow-up statement, Karpelès urged affected users to contact him or send photographs of their Ledger circuit boards for inspection. The potential connection remains unconfirmed.
This looks like this could be exactly what I'm investigating. Anyone affected, please contact me or open your ledger and send me pictures so we can confirm if there's a bug in there (pictures: ledger board on top, spy implant below).https://t.co/mg2VRHLRHE pic.twitter.com/0HN3fr7Baq
— Mark Karpelès (@MagicalTux) October 9, 2026
Binance founder Changpeng ‘CZ’ Zhao said that reported Ledger-related fund losses may be linked to a supply chain attack involving a single vendor, warning users who had recently purchased the hardware wallets to exercise caution. He suggested some customers may have bought counterfeit or compromised devices.
⚠️ Beware if you use a Ledger hardware wallet, especially if you bought one recently.
Based on information so far, it seems to be localized to a supply chain attack with one vendor. A small number of people probably bought fake (or tampered) Ledgers.
Ledger is one of the most… https://t.co/zW8wkvdZNf
— CZ 🔶 BNB (@cz_binance) October 9, 2026
Zhao also called on the BNB ecosystem and the wider crypto industry to help trace the stolen assets and recover the funds.