A scammer lost 60 Bitcoin, roughly $4.8 million, after storing stolen funds on three newly purchased Ledger devices infected with seed-phrase-recording spyware, according to blockchain analytics firm Chainalysis. The loss makes the perpetrator one of 530 victims in a supply-chain attack that has drained more than $103.4 million across Asia.

The tampered devices were inserted into Ledger's reseller network in Southeast Asia. The thieves drained all three of the scammer's wallets into a single address, on-chain records tracked by Chainalysis show. The victim had run a so-called task scam, in which workers were paid for fake sales and reviews and then shown a fabricated negative balance. "Then a 'negative balance' appeared, and they were told to add their own money in order to get paid," Chainalysis reports.

Ledger has suspended its reseller network across Southeast Asia and asked resellers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to pull devices from shelves. Despite reports of tampered units appearing in Europe, which forced electronics retailer MediaMarkt to suspend sales, Ledger says every confirmed theft to date traces to Asia. Trezor, which has no reported tampering cases, will close its more distant resellers from January 1, saying it cannot apply the same vigilance to far-flung partners as to those closer to home.

The scandal, the worst in hardware wallets since the Coldcard seed-phrase incident in late July, has not stopped Ledger from shipping product. The firm launched its $849 Atom device, which pairs a crypto wallet with sandboxed Android apps and includes protections Ledger says would have blocked the implants used in Asia, including tamper detection while powered off.

What does the tightening mean for Asian market access?

South Korea's Financial Intelligence Unit has approved blocking domestic access to 27 websites run by unregistered crypto exchanges and other virtual asset service providers, including KuCoin, MEXC, Phemex, Bitrue, CoinW, BTCC, BitMart, BingX and DigiFinex. "Blocking measures against illegal virtual asset operators will also apply to internet websites, following apps such as those on Apple and Google," the FIU said in a statement.

Separately, the Financial Services Commission will tighten cybersecurity rules after a review found deficiencies at 130 of 555 financial companies. The FSC plans improved threat monitoring, more frequent security assessments and stronger executive accountability following incidents at 16 firms, including crypto exchanges. In a market-structure shift, Jeonbuk Bank has reportedly begun offering Bitcoin-backed corporate loans, with collateral held by a third-party custodian.

Thailand's Securities and Exchange Commission has finalized rules, effective Friday, allowing crypto ETFs to list exclusively on the Stock Exchange of Thailand, starting with Bitcoin and Ether products. Foreign crypto ETFs are barred initially, and Thai brokers may not facilitate overseas crypto ETF investments except for institutions and ultra-high-net-worth individuals.

James Butterfill, head of research at CoinShares, tempered expectations. "I would expect modest inflows initially, with tens of millions of US dollars across the first products a more realistic starting expectation than billions," he told Cointelegraph.

Hong Kong now has a second Solana ETF. Pando Finance's fund listed on HKEX under ticker 2831.hk with a 0.6 percent fee, undercutting ChinaAMC's first-mover fund at 0.99 percent annually. At Token2049, Binance co-CEO Richard Teng said the exchange may add Hong Kong, Korean, Taiwanese and Brazilian equities to its platform.

What does the London ruling mean for the 61,000 BTC claimants?

London's High Court has ruled that Chinese law governs claims to 61,000 Bitcoin seized by the British government during a money-laundering investigation into an investment fraud run by Zhimin Qian between 2014 and 2017. "The relevant damage occurred in China. The Applicants parted with their money in China," Justice Mark Turner wrote. The claimants will appeal in British courts.

Elsewhere, Australia's Securities and Investments Commission opened consultation Thursday on capital, custody and trading rules for crypto platforms ahead of a 2027 rollout, proposing three capital models, a ban on proprietary trading, quarterly wallet reporting and an extension of CFD rules to crypto. Singapore's police crackdown helped cut reported crypto scam losses by 43 percent year over year. Coins.ph denied it faces license revocation, stating: "Coins.ph firmly denies any claim that it knowingly serves offshore gaming or gambling operators. Our users' funds are safe; we continue to operate as a BSP-licensed institution."

For practitioners, the immediate action item is operational: verify device provenance before funds move, because reseller channels in seven Asian jurisdictions remain the attack surface, and Trezor's reseller cull lands on January 1.