Ledger stated that all confirmed cases of compromised hardware wallets involve devices sold by the Southeast Asian reseller CryptoBilis, while critics argue the hardware-wallet maker must take responsibility for an authorized sales channel. Blockchain analytics firms Bitquery and YFarmX estimate that up to $93.2 million to $94.5 million in crypto, primarily USDT and TRON tokens, was siphoned from hundreds of wallets linked to the exploit. Tether has frozen $10 million in USDT tied to the theft. Ledger confirmed an unauthorized hardware implant in at least one affected device and advised CryptoBilis customers not to set up unused devices, or to move assets to a new device with a newly generated recovery phrase if already used.