Cabal Desk
Search
Incidents No. 000274

Ledger to Southeast Asia Buyers: Do Not Set Up the Device, Move the Assets

Ledger asked a reseller to stop shipping devices. Buyers from the last 90 days were told not to set up, and to move assets to a new seed.

Illustration: Ledger to Southeast Asia Buyers: Do Not Set Up the Device, Move the Assets

Ledger says it is looking into reports of lost funds. The users are in Southeast Asia. They bought devices from a reseller called CryptoBillis.[1]

Ledger asked the reseller to stop all sales and shipments of its devices.[1] Buyers from the last 90 days should not start setup. Those who already set up should think about moving their assets to a new signer with a new seed.[1]

The notice gave no loss amount, no victim count, and no confirmed method of attack.[2]

What to do: wait on setup if you bought from that reseller in the last 90 days. If the device is already running, move your assets to a new signer with a new seed.[1]

Who gains, who loses

Ledger's reseller investigation buyers from the last 90 days lose the assumption that a device bought from a seller is safe; Ledger disclosed no loss amount, victim count, or method.
CryptoBillis is asked to pause all sales and shipments the reseller loses device revenue while the investigation runs, and no accusation has been made by name.

Receipts

[1]

Ledger said it was investigating reports of lost funds from Southeast Asian users who bought products from the reseller CryptoBillis, asked CryptoBilis to pause all Ledger-device sales and shipments, advised buyers from the previous 90 days not to begin setup, and told already-set-up users to consider moving assets to a new Ledger signer with a new seed.

“Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause…”

[2]

Ledger’s public notice did not disclose a loss amount, victim count, or confirmed attack mechanism.

“Ledger has confirmed only that it is investigating reports from Southeast Asian users who purchased products through CryptoBilis.”

Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.