Ledger stated that all confirmed cases involve devices sold by Southeast Asian reseller CryptoBilis, as investigators traced up to $93 million and froze $10 million. Critics argue the hardware-wallet maker must still answer for its authorized sales channel.