Scammer Loses $4.8M on Tampered Ledgers as Supply Chain Hack Hits $103M

A scammer reportedly lost roughly $4.8 million—60 Bitcoin stolen from three tampered Ledger hardware wallets—after storing fraud proceeds on devices compromised through a Southeast Asian supply chain attack. Blockchain analytics firm Chainalysis confirmed the ironic twist, noting the scammer had previously operated a "task scam" in which victims were lured into adding their own money under the guise of completing paid assignments. Chainalysis described the situation as "turtles all the way down" in crypto, with the stolen funds ultimately drained into a single wallet by the Ledger thieves.

The broader incident has now reached $103.4 million stolen from 530 addresses, forcing Ledger to suspend its reseller network across Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong. The tampering involves implants that capture seed phrases before they reach the legitimate device, affecting devices sold through the region. Trezor announced it will shutter some far-flung resellers beginning January 1, citing an inability to guarantee the same supply chain vigilance closer to home, though no tampered Trezor devices have been reported. Tampered devices have also surfaced in Europe, prompting electronics retailer MediaMarkt to suspend Ledger sales, though Ledger maintains all confirmed thefts remain confined to Asia.

In South Korea, regulators approved measures to block domestic access to 27 websites operated by unregistered crypto exchanges, targeting KuCoin, MEXC, Phemex, and Bitrue among others. Thailand has also moved to launch spot Bitcoin and Ether ETF trading. Despite the ongoing crisis, Ledger pressed ahead with the launch of its $849 Atom device, which combines a crypto wallet with Android apps in an isolated environment. The company claims Atom includes protections against the implants used in the Asian attacks and can detect tampering even when powered off.