Ledger hardware wallet supply chain attack drains $90 million from users

A hardware wallet security has rocked the XRP and cryptocurrency community, raising questions about how millions protect their digital assets. The recent compromise of Ledger hardware wallet devices resulted in more than $90 million in user losses, according to reports from Southeast Asia.

Ledger wallets targeted in supply chain attack

The affected users reportedly purchased their devices through CryptoBilis, a regional reseller with operations in Malaysia, Indonesia, and the Philippines. Investigations suggest that the attack involved tampered wallets, where devices reached buyers with seed phrases already known to bad actors.

Ledger immediately halted all sales through CryptoBilis while probing the source of the incident. The theory that emerged centers on a supply chain breach, which enabled attackers to distribute compromised hardware wallets before they arrived in the hands of customers.

Seed phrases operate as the master keys to digital wallets. When a device arrives with a pre-set seed phrase, any assets sent to that wallet could be accessed and drained by those with prior knowledge of that phrase.

On the risks of buying hardware wallets online, Dom Kwok, co-founder of EasyA, emphasized that users must generate their own seed phrases during setup. He highlighted that if a wallet arrives with a pre-filled seed phrase, it is already compromised and should never be used for storing digital assets.

How users can protect their assets

Some XRP holders expressed concerns over whether purchasing hardware wallets directly from a manufacturer’s official website would guarantee safety. The response from community members clarified that legitimate devices prompt users to generate a unique seed phrase during their initial setup on the device, ensuring that no one else, including the manufacturer, sees it.

The security breach has renewed focus on alternative wallet solutions designed to minimize similar risks. For instance, Tangem offers a hardware wallet in credit-card format, using NFC technology to generate and store private keys directly on the card, effectively removing reliance on seed phrases. Xaman, which is a software wallet purpose-built for the XRP Ledger, stores private keys on mobile devices and also provides an NFC card option that adds an extra hardware security layer in partnership with Tangem.

Kwok advised users to avoid devices that arrive with pre-set credentials. Instead, generating a new seed phrase during setup on a device obtained via reputable channels provides a layer of defense against such threats.

Seed phrase attacks highlight the need for constant vigilance in crypto security. As attackers use increasingly sophisticated tactics, experts stress that investors must remain cautious about new attack vectors targeting both hardware and software wallets.

New technological tools for risk management

With shifting market conditions and unpredictable risks, investors need to monitor portfolios and market data across multiple apps, which can make it difficult to react quickly to threats. In a market where a single Fed decision or an unexpected altcoin listing could transform the landscape within seconds, tracking resources in fragmented platforms can cost traders money. As a result, many are now turning to privacy-focused solutions such as CryptoAppsy, which provide a consolidated dashboard featuring real-time charts, actionable price s, coin-specific news, and macro-economic data—without requiring users to create accounts.

Projects like CryptoAppsy aim to simplify the monitoring process, allowing users to make more informed decisions and respond rapidly to sudden shifts in the market by integrating advanced tracking and features on a single screen.

While hardware wallets remain a core element in digital asset security, this incident reveals that threats can emerge even through supply chains. Investors are urged to use only trusted sources, generate their own seed phrases, and consider adopting tools designed to streamline market oversight and risk management.