Third-party estimates of the Oct. 9 wallet drains range from $86 million to $100 million across 300 to more than 500 addresses, with security researcher Taylor Monahan noting that reports point to compromised devices purchased between June and October. While Ledger maintains that all confirmed fund losses trace to wallets sold by Malaysia-based authorized reseller CryptoBilis, Mark Karpelès reported finding a spy implant inside a Ledger Flex bought at Metapod in Singapore's airport, and a European buyer reported discovering identical LTE modules inside two non-returned Nano X units purchased at separate MediaMarkt stores supplied by Germany and Austria distributor Aqipa.
alongside instructing resellers and distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales and pull inventory from shelves, Ledger introduced stricter security rules banning open-shelf displays and the resale of returned units. European electronics retailer MediaMarktSaturn also removed all Ledger products from its stores and online platforms across its markets, while Ledger stated that its internal systems and direct sales channels remain uncompromised.