Ledger confirmed that all documented hardware wallet draining cases linked to CryptoBilis-sold devices involved devices purchased from reseller CryptoBilis within three months prior to October 10, 2026