A cryptocurrency trader has lost 80 Bitcoin (BTC) worth approximately $6.6 million after transferring funds to a brand-new Ledger hardware wallet purchased from an official third-party reseller.
Timeline of the 80 BTC Transfer
Blockchain data provided by Lookonchain reveals that the victim originally acquired the 80 BTC roughly four months ago at an average price near $65,000 per coin, representing an initial outlay of $5.2 million. Public mempool records confirm that the funds were deposited into the newly configured wallet on September 29.
The entire balance remained untouched for 10 days before being drained in a single transaction at 05:54 UTC on October 9. With Bitcoin market prices trading above $83,000, the investor was holding $1.38 million in unrealized paper gains prior to the security breach, even as broader market volatility saw Bitcoin drop to $80,393 in recent liquidations. On-chain analytics show that the transaction block containing the drain included at least six other large transfers directed toward linked illicit addresses.
Reseller Sales Halted as Losses Near $90 Million
Following the incident, Ledger instructed its Southeast Asian reseller, CryptoBilis, to immediately halt sales while launching a formal investigation into the compromised devices. Ledger has urged recent customers of the distributor to delay setting up new hardware units until further notice, though official sources have not yet confirmed whether physical supply chain tampering occurred.
Security firms report that the theft is part of a significantly broader exploit:
- Arkham estimates total cumulative losses connected to the incident exceed $80 million.
- MistTrack, the tracking service operated by security firm SlowMist, estimates overall losses are approaching $90 million.
- Tether has actively intervened to freeze USDT tokens across multiple blockchain addresses linked to the attacker.
- Hardware wallet vulnerabilities remain a persistent risk across the industry, following an August incident where a Coldcard firmware defect led to $70 million in stolen Bitcoin.
Why It Matters
This severe breach highlights critical vulnerabilities within hardware wallet distribution networks and supply chain logistics. Even offline cold storage hardware is susceptible to physical interdiction, pre-seeded recovery phrases, or modified components when obtained through third-party supply chains. As protocol developers work to harden core software, such as Core Lightning patching security bugs, physical distribution vectors remain a dangerous weakness requiring strict procurement standards.
