Ledger/CryptoBilis reseller supply-chain wallet drain (Oct 2026)
- Scam type: Hack
- Chain: Tron
- Reported: 2026-10-14
- Last updated: 2026-10-16
Mass drain of wallets belonging to Ledger hardware-wallet buyers who purchased through Southeast Asian reseller CryptoBilis, starting 2026-10-09 (UTC), across TRON, Bitcoin, Ethereum, BNB Chain, Polygon and Solana. Ledger said confirmed cases involve CryptoBilis devices and confirmed an unauthorized hardware implant in at least one affected device; the exact key-leak mechanism for every victim is not publicly proven. (also used on BNB Chain and Polygon); Bitcoin bc1qjq..., bc1qqn...), additional TRON drain/USDD/control addresses, the TRON key added to 30 victim wallets and its Bybit-funded…
Other addresses in this report: TK6DWNpNe1w2iJRNFpU8aHdrPTATxvXT6C, TBkcUMYC7CkTK99tkTnaStQVBastfrs9d9, TCGE3xp6YGRKXxDZiLfysgJW3f22KfMNsW, TSDWtuZ2pARUVz4v3PkL2hi3iXPjowAr5a, TYohhJpmXn4uuKhC1uFRCCjMWAWPJnUfGj, TELKRMtrav92w6Y44qdqRvmsKBxAnwZznW, TQoTZGYYtCyQxy6r9ujD7NBxrYufAeP9FQ, TRTVHpgANbyo44HUpjUPLQnezo66GT2bzE, TRMHXE4H4BMSBx5Uig4tAJFa2JaXK7GpDQ, TRu643bTQVX74nxZ7nP6EetCkzhYxeD2pY, TFxdckPCvXjn48YcUhHf5uhfcRDp6CciNP, TMGrwEhgoPQeUuBBj7eCw6F5X8FQ4fmZcw, TAzdU79XsKJNX4n9ks7GAeA1zKCPZXCSYQ, TEqZsE39aNXRnuTwrXJ9ooWMc87puuZxpK, TWGHw7ZsDdXaP6Jw3vJgJ35FHKUvetBf3E, 0x69c8f401cfc6cd40ac94691d6d7c48e3b7a47841, 0x033636e45d519bebb7b5c2520ca6ce56fbdb4f7a, 0x83aeac166f6832ae3500000a24510a95a052a599, 0x381825deb972b3d0a031a9ce86902ac8b22df8f2, 6Lx2Ma9LHSVXZUaJdN75uPW35APxfzjswLoW1MiMTVUy and 40 more