One of the best-known hardware wallet brands in the world reported that it is investigating a possible "tampering" incident tied to $86 million in stolen crypto, in a breach that raises questions about the chain of custody behind a product many institutional investors have relied on for over a decade.
The Ledger company said it is investigating reports that wallets were tampered with, and that roughly $86 million in cryptocurrency was drained in connection with the incident. The figure, reported by industry outlets, is among the largest single-event wallet-side losses in years, and it lands at a moment when a growing share of institutional and retail holders keep their coins in hardware devices that sit at the endpoint of a custody chain.
The investigation is significant for a second reason: Ledger is a trusted, regulated-adjacent name. If the company's own hardware or firmware can be compromised in a way that allows a mass exfiltration, the assumption that "cold storage is safe" becomes a contested one. That has practical consequences for anyone — from a fund to a treasury board — that has built a security policy around the Ledger product line.
Ledger has not said how the incident was carried out or whether a software or supply-chain flaw was involved. The company's statement, as widely reported, frames it as an active investigation. In the interim, the $86 million figure is a reminder that the boundary between hardware security and supply-chain security is thin, and that a single compromised device can expose a portfolio far larger than that one device.