Crypto wallet company Ledger is requesting resellers and distributors in Hong Kong and several Southeast Asian nations to cease the sale of its products. This move follows an incident involving the official Malaysian reseller, CryptoBilis, which was suspended last week after it was discovered that devices sold through the company contained spyware linked to an $86 million cryptocurrency hack.
Ledger’s announcement extends to Malaysian resellers and includes distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, and Hong Kong. Affected companies include well-known platforms such as LazMall, Shopee, N-Crypt, Tokopedia, and Bitkub, among others.
Investigation into Supply Chain Tampering
The company aims to investigate the sources of tampering within its supply chain. Ledger’s efforts are focused on identifying how and where these devices may have been compromised. Whether all identified resellers will comply with Ledger’s request remains uncertain. In addition to the Southeast Asia-wide request, Ledger’s German reseller, MediaMarkt, has also paused sales as part of its response to the recent security concerns.
When approached for comments on the ongoing situation, Ledger referred to its recent statement on X, noting that it is part of a sensitive and ongoing investigation. Further information will be provided as the investigation develops.
In a related move, rival crypto wallet provider Trezor has also decided to reduce its number of resellers, likely influenced by the recent hack incident affecting several Southeast Asian businesses, although the specific resellers have not been disclosed. Trezor emphasized that there is currently no evidence to suggest that its devices have been compromised, describing its actions as precautionary.
Some Trezor wallets reportedly have been tampered with after being purchased from unauthorized vendors, raising concerns among users. Trezor has indicated that these cases date back to previous incidents and involved significant alterations rather than minor implants. The company has confirmed that it has also terminated its relationship with CryptoBilis.
