Tampered Inside a Trusted Channel: Ledger, Gilead and What Recovery Takes

Ledger confirmed an implant in a wallet sold by an authorized reseller. Gilead's fake HIV drugs used genuine bottles. How Gilead's recoveries were counted.

Thomas Rossi
Oct 16, 2026

TL;DR

  • Ledger has confirmed an unauthorized hardware implant in a device sold by CryptoBilis, an authorized reseller in Southeast Asia, and says all confirmed cases in the 9 October wallet drains involve that reseller. Analysts estimate losses at about $93.2 million; Ledger has not confirmed a figure.
  • In the devices researchers examined, the secure element was genuine, so Ledger's Genuine Check passed. Where the tampering happened has not been established.
  • Gilead's counterfeit HIV medicine cases had the same shape: authentic Gilead bottles refilled with other pills and sold to pharmacies with forged paperwork. The Safe Chain owners were sentenced to a combined 38 years in March 2026, and a magistrate judge recommended $68 million against another group in June.
  • Gilead's damages were calculated per unit distributed by each defendant. The size of any recovery depends on reconstructing which units passed through whose hands.

On 9 October Ledger said it was investigating reports of drained wallets among customers in Southeast Asia who had bought their devices from CryptoBilis, a Malaysia-based retailer that The Block reports is listed as an official Ledger reseller in Indonesia, Malaysia and the Philippines. The same day, Ledger asked CryptoBilis to pause all sales and shipments of Ledger devices and told anyone who had bought from it in the last 90 days not to set up an unused device, and to move funds to a new device with a new recovery phrase if they already had.

On 10 October Ledger confirmed that "one of the impacted users' devices contained an unauthorized hardware implant." In a 72-hour update on 11 October, Ledger said that all confirmed cases related to the draining incident involve devices sold through CryptoBilis, that its own systems and direct sales channels were not compromised, and that "CryptoBilis has confirmed having ceased all sales of hardware wallets."

Ledger has not published a loss figure. On-chain analysts have: Bitquery puts suspected thefts at about $93.2 million across 315 wallets on six blockchains, after earlier estimates from the researchers tanuki42 and Specter of more than $72 million and more than $86 million. Tether moved to freeze USDT linked to the thefts on 9 October.

Several things are still open. Ledger has not said how many devices were modified, or whether the implant explains every reported loss. Nobody has yet established where in the distribution chain the tampering happened, so nothing published so far shows whether CryptoBilis altered devices or was itself supplied with altered stock.

A genuine chip inside a modified device

Ledger has not publicly described the implant it found. Researchers who opened tampered devices, including Mark Karpelès and Tibane Labs, describe a small, professionally manufactured board hidden behind the screen. According to their reports, the board reads what the display shows and which buttons are pressed, captures the recovery phrase during setup, and sends it out over LTE through an eSIM. Tibane Labs' two specimens came from Japanese marketplaces rather than from CryptoBilis, so it is not yet confirmed that they match the devices behind the drained wallets.

Karpelès said the device he bought in Malaysia passed Ledger's Genuine Check. That is consistent with what the check is for. Genuine Check "verifies the secure element's authenticity", the chip that holds the keys, and Ledger's documentation says it "cannot detect unauthorized physical modifications" when that chip is intact. In the devices the researchers examined, the secure element was Ledger's own. The implant was an addition next to it.

Ledger's 72-hour update also contained two reminders for its channel: authorised resellers and distributors should "source products only through authorized channels" and should "never restock returned products." Both instructions concern how a unit gets into a reseller's stock, which is a question about the route the device took rather than about the device itself.

Gilead: genuine bottles, other pills, forged paperwork

The closest precedent is in pharmaceuticals. In January 2022 Gilead said that a network of unauthorised distributors and suppliers had sold pharmacies more than $250 million worth of counterfeit versions of its HIV medicines, including Biktarvy and Descovy, over two years. Gilead had identified 85,247 tampered or fake bottles and seized product at 17 locations in nine states. According to Reuters, the counterfeiters used authentic Gilead bottles, often empty or nearly empty, filled them with other tablets and paperwork, and resealed them to look unopened. One of the most common substitutes was an antipsychotic.

One of the wholesalers in that chain was Safe Chain Solutions, a pharmaceutical distributor in Maryland. In the criminal case that followed, prosecutors showed that its owners, the brothers Patrick and Charles Boyd, had worked with at least five black-market suppliers to buy HIV drugs obtained through patient "buyback schemes" at steep discounts. One supplier testified that he bought the drugs from patients on the street, removed the prescription labels, and shipped the bottles in cardboard boxes "sometimes scavenged from trash on pick-up days." Safe Chain then sold the bottles on to pharmacies with forged paperwork that made them look legitimate. In one case presented at trial, a patient expecting HIV medication found Seroquel in the bottle, took it, and lost consciousness for 24 hours.

A jury convicted the brothers in October 2025. In March 2026 Charles Boyd was sentenced to 20 years and Patrick Boyd to 18, with $21.85 million in asset forfeiture. A third owner, Adam Brosius, pleaded guilty and was sentenced to 97 months.

The two channels are not the same. Safe Chain was not one of Gilead's authorised distributors, and Gilead described the network as unauthorised from the start. CryptoBilis was an authorised Ledger reseller. What the cases share is the shape of the product: each reached the buyer through a business the buyer had reason to trust, built around a part the brand itself had made. A pharmacist looking at a Gilead bottle saw a real Gilead bottle, and a Ledger owner running Genuine Check got a pass from a real Ledger secure element.

What the recoveries were measured in

Gilead has now spent more than four years pursuing these cases through the courts, and the results show how this kind of recovery gets sized:

  • February 2024: Safe Chain and its founders agreed to a consent judgment and permanent injunction in Gilead's civil suit, barring the company from buying certain Gilead products. Safe Chain denied wrongdoing.
  • March 2026: the criminal sentences above, including $21.85 million in forfeiture. Prosecutors put the volume at more than 28,000 bottles resold for over $92.8 million up to September 2021, ultimately paid for by Medicare, Medicaid and private insurers.
  • June 2026: in a separate case in federal court in Brooklyn, Gilead v. Khaim, a magistrate judge recommended default judgment against 26 defendants who had allegedly refilled empty Gilead bottles "with wrong medication" and sealed them "with a counterfeit Gilead tamper-evident foil seal". Law360 reports the recommended award at $68 million. The defendants never answered the complaint, and the recommendation still needs a district judge's sign-off.

An earlier Florida case shows the scale these awards can reach on a related scheme. In 2023 Gilead obtained default judgments of about $175 million against people accused of obtaining its PrEP drugs through its patient assistance programme and buying them back from patients for resale, and its counsel put the total awarded in that case at nearly $250 million.

The method in Khaim explains where figures like these come from. For each defendant, Gilead's expert took Gilead's lost profit per unit, the wholesale price minus Gilead's cost of goods, and multiplied it by the number of units that defendant had distributed. The court noted that Gilead "is entitled to full judgments against each tortfeasor, but is limited to recovering its damages once." In practice, that makes the award a count of which units passed through whose hands. Figures like the 28,000 bottles and the 85,247 bottles come out of investigations, reconstructed after the fact from the trail the product left. In September we wrote about a UK court estimating six years of counterfeit sales from one bank account, where the same reconstruction problem decided the damages.

For Ledger, the counting starts now

Ledger's response so far has been containment, and it was fast: Ledger paused the reseller's sales on the day it opened its investigation, confirmed an implant the next day, and gave buyers specific instructions in its first statement. The next phase is the one Gilead's cases turned on, and it is about counting: how many devices were altered, which batches they came from, where they entered the reseller's stock, and when. Bitquery noted that more than eight in ten of the drained wallets first received funds in June or later, which is one reason the exposure window is still being debated.

Those answers will decide who is responsible for the losses, whether any of the stolen funds can be traced and recovered, and against whom any claim could be brought. They also come from the same kind of records in both industries: which unit was shipped to whom, from what source, at what price and on what date.

The question worth asking

In both cases the item carried the brand's own genuine parts, so checking the item alone could not settle anything. The evidence that mattered, for patients, for courts and for the size of any recovery, was the route each unit took. So for any brand that sells through distributors and resellers: if one of your resellers reported tampered stock tomorrow, could your team list which of your units passed through that reseller, where those units came from, and who bought them?

References

Ledger's investigation is ongoing and the loss figures above are third-party estimates that Ledger has not confirmed. Nothing published so far establishes where the tampering took place.

Image: a Ledger Nano X. Photo by Roderart, CC BY-SA 4.0, via Wikimedia Commons, cropped.

Source

Similar posts

Get notified on new anti-counterfeiting insights

Be the first to know about new anti-counterfeiting, supply chain security and brand protection insights to build or refine your anti-counterfeiting function with the tools and knowledge of today’s industry.