- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Ledger / CryptoBilis
- Incident date: 2026-10-09
- Reported: 2026-10-17
- Last updated: 2026-10-17
Follow-up to the 2026-10-09 Ledger/CryptoBilis reseller wallet drain. On 15 and 16 October the thief sent another 2.06 million USDT to TRON, including the proceeds of 488 ETH bought with 1.25 million USDC. It also put about 360 ETH more into Tornado Cash, the last 50 ETH at 14:49 to 14:50 UTC on 16 October. and 0xe4b7... and 93,000 USDT in TLocic... as balances Circle and Tether can freeze. On-chain check on 2026-10-17 (about 3:30 PM CT): 0xd151... and 0xe4b7... each still held 100,000 USDC, and TLocic... held about 50,001 USDT. That wallet holds between 0.6 and 2.0 million USDT of the…
Other addresses in this report: 0xabb240f4d466bbd49185687803e5423125b028b4, 0x06e5759abc8a76c6dd3b4eea2a2f858839a8a714, 0x5a93208481198f3a9794146a1d8d39b700b45108, 0x50b4765033a52bc363cd66dfc68c0116cbc01e8b, 0xd151ab5e274aa693b473b3da530d99c1b3a1bdaf, 0xe4b76319624d290872200d1ec7097d44c4292f3a, 0x2e3f6fd30ef2fc64affdc177451e5fc06fd73351, 0x912189fc491ef75d6b611e95a7886517147af9e8, TLocicTHHZQ25WrfFkpVcHkYGqbKSsU9Ps, TBJfygNYDQNDzhX43PeV31YMv1tzdf7pgp, TGr5w5pLXvJVXUhqmM37zkGqycb8zUDnME