Tether Freezes $10M of a $92.9M Drain That Hit 311 Wallets
Tether froze $10.0M across 20 wallets, half a million each. The last drain ran at 16:37 UTC.
$92.9M left 311 wallets on TRON, Bitcoin, Ethereum, BNB Chain and Polygon, per Bitquery’s count of the Ledger CryptoBilis incident[1]. The last drain ran at 16:37 UTC, with about $79M still traceable[2][3].
Ledger said it is investigating customers who bought devices from CryptoBilis and asked the reseller to stop sales and shipments[4].
Tether froze $10.0M in USDT across 20 wallets, half a million each[5][6]. It began blocking linked addresses ten minutes after the first public post and stopped 37 between 12:09 and 14:10 UTC on October 9[7][8]. At 15:30 UTC it lifted the block on four OTC-style wallets[9].
What to do: do not set up unused devices bought from CryptoBilis in the last 90 days, and move assets off activated ones to a new signer with a new seed[10][11].
Who gains, who loses
Receipts
Bitquery counted $92.9M taken from 311 wallets across TRON, Bitcoin, Ethereum, BNB Chain and Polygon in the Ledger CryptoBilis incident.
“We count $92.9M taken from 311 wallets on TRON, Bitcoin, Ethereum, BNB Chain and Polygon, more than first reported.”
The stolen funds moved across TRON, Bitcoin, Ethereum, BNB Chain and Polygon, and the last observed drain occurred at 16:37 UTC.
“The funds moved across Tron, Bitcoin (BTC), Ethereum, BNB Chain and Polygon, with activity continuing through Oct. 9.”
TokenPost reported that approximately $79 million remained traceable on-chain when the final observed drain occurred.
“The last observed drain occurred at 12:37 p.m. ET (16:37 UTC), and about $79 million remained traceable on-chain at that time.”
Ledger said it was investigating reports involving customers who bought devices from CryptoBilis and asked the reseller to stop sales and shipments.
“Ledger said it is investigating reports involving customers who bought devices from CryptoBilis and asked the reseller to stop sales and shipments.”
Bitquery reported that Tether froze $10.0M in USDT held across 20 wallets.
“Tether froze $10.0M.”
The 20 frozen wallets each still held approximately half a million USDT, leaving $10 million immobilized.
“Twenty still held half a million USDT each, so $10 million is now stuck.”
Bitquery reported that Tether began blocking linked addresses about ten minutes after the first public post and blocked 37 addresses over the following two hours.
“About ten minutes after the first public post, it started blocking addresses linked to the theft, 37 of them over the next two hours.”
Tether blocked 37 addresses linked to the theft between 12:09 and 14:10 UTC on October 9.
“12:09 to 14:10|TRON|Tether blocks 37 addresses linked to the theft; 20 of them hold $10.0M”
Tether lifted the block on four OTC-style wallets at 15:30 UTC on October 9.
“At 15:30 UTC Tether lifted the block on four wallets.”
Ledger advised customers who bought from CryptoBilis within the previous 90 days not to set up unused devices.
“Ledger also advised customers who purchased from the reseller within the previous 90 days not to set up unused devices.”
Ledger advised customers who had already activated affected devices to consider moving assets to a new signer with a new seed.
“Customers who had already activated devices were urged to consider moving assets to a new signer with a new seed.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.