A fraudster who ran a "task scam"—paying participants to fabricate sales and reviews—was himself duped by compromised hardware wallets. Chainalysis traced the loss of 60 Bitcoin, valued at about $4.8 million, to three newly bought Ledger devices that had been altered in the supply chain to capture seed phrases. The stolen funds were funneled into a single address, effectively turning the scammer into a victim of a scammer.

Ledger’s supply-chain response

Following the discovery of tampered devices across Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong, Ledger ordered the suspension of its reseller network throughout Southeast Asia. The company has urged those retailers to pull the affected products from shelves. While no similar tampering has been reported for competing Trezor wallets, the hardware maker is also launching a new product, the Ledger Atom, priced at $849. The Atom separates Android applications from core wallet functions and claims to detect hardware implants even when powered off, aiming to block the type of spyware used in the recent thefts.

Parallel regulatory developments in the region

South Korea

The Financial Intelligence Unit approved a ban on domestic access to 27 foreign crypto exchange websites, including KuCoin, MEXC, Phemex and Bitrue. Simultaneously, the Financial Services Commission announced tighter cybersecurity standards for banks and crypto firms after an industry-wide review uncovered significant gaps at 130 of 555 financial institutions.

Thailand

The Securities and Exchange Commission finalized rules allowing Bitcoin and Ether exchange-traded funds to list on the Stock Exchange of Thailand. The initial offerings will be limited to domestic investors and ultra-high-net-worth individuals, with foreign-linked ETFs excluded for now.

Australia

The Australian Securities and Investments Commission opened a consultation on new capital, custody and trading requirements for crypto platforms ahead of a 2027 rollout. Proposals include multiple capital models, restrictions on self-trading, and quarterly reporting of wallet holdings, as well as an expansion of CFD regulations to cover crypto assets.

China

A London High Court decision ruled that Chinese law, not English law, should govern claims to 61,000 BTC seized in a money-laundering case tied to a 2014-2017 fraud scheme. The plaintiffs, Chinese victims of the scheme, will seek to appeal the ruling.

Philippines

Coins.ph reiterated that it retains its central-bank licence despite media reports suggesting possible revocation over alleged dealings with offshore gambling operators. The exchange denied knowingly serving such entities and affirmed the safety of user funds.

Hong Kong & Singapore

Binance co-CEO hinted at adding Asian equities—including Hong Kong, Korean and Taiwanese stocks—to its platform. Meanwhile, Singapore Police, working with local exchanges, helped cut reported crypto-scam losses by 43% year-over-year, and Revolut announced a $273 million investment to expand its Singapore presence.

Why it matters

The Ledger incident underscores the persistent risk of hardware supply-chain attacks, prompting manufacturers to tighten security and introduce advanced tamper-detection features. At the same time, a wave of regulatory actions across Asia reflects growing governmental scrutiny of crypto activities, from exchange licensing to cybersecurity standards and the introduction of regulated investment products. Together, these developments signal a shift toward greater oversight and heightened security expectations for both users and service providers in the cryptocurrency ecosystem.