Topic
hardware wallets
23 stories
Trezor warns CryptoBilis buyers to move funds after alleged implant found in a Safe 5
Trezor warned customers who bought hardware wallets from reseller CryptoBilis since March 2026 to move their funds after a disclosure alleged a cellular implant hidden inside a Safe 5 device.
Ledger confirms recovery-phrase implant in a wallet bought from reseller CryptoBilis
Ledger's security team confirmed an unauthorized hardware implant that captured recovery phrases in a wallet sold by Southeast Asian reseller CryptoBilis, amid a suspected but unverified $86 million in losses.
Ledger Finds Cellular Implant in Reseller-Sold Wallets Tied to Suspected $86M Drain
Ledger says it found a hidden cellular implant inside hardware wallets sold by Southeast Asian reseller CryptoBilis that siphoned off users' recovery phrases, in what has been described as a suspected $86 million theft.
A scammer loses 60 BTC to the Ledger implant exploit — stolen from a wallet already full of stolen funds
Chainalysis says a task-scam operator lost 60 BTC — over $4.9 million — after moving proceeds to Ledger wallets tied to compromised devices sold by Southeast Asian reseller CryptoBilis.
Ledger pitches a $900 Android "security phone" as the fix for a breach that already happened
Ledger announced Atom, an $849–$899 Android device that switches between everyday apps and a secure signing mode, pitched as a tamper-resistant answer to a reseller breach — but it won't ship until summer 2027.
Ledger confirms seed-stealing implant in CryptoBilis-sold signers; MediaMarkt pulls devices in Europe
Ledger confirmed that hardware signers sold by reseller CryptoBilis were fitted with LTE implants that steal recovery phrases during setup, and MediaMarkt halted European Ledger sales after a German customer found a tampered unit.
Ledger Investigates Suspected $86M Drain Tied to Reseller's Tampered Devices
Ledger is investigating the loss of a suspected $86–87 million in customer funds after devices sold by a Southeast Asian reseller, CryptoBilis, were found to carry an implant that captured recovery phrases.
Ledger blames hidden 'spy chip' in CryptoBilis-sold wallets for recovery-phrase theft
Ledger says a covert chip hidden inside hardware wallets sold by reseller CryptoBilis read users' 24-word recovery phrases off the screen and beamed them to attackers over LTE; researchers estimate up to $93.2 million lost.
Ledger Pins Confirmed Wallet Drains on Reseller CryptoBilis as On-Chain Sleuths Trace $86M+
Ledger says every confirmed case in a wallet-draining incident that on-chain investigators peg at more than $86 million traces to devices sold by Southeast Asian reseller CryptoBilis, which has halted hardware sales.
Ledger confirms hardware implant in wallets sold by reseller CryptoBilis; researchers peg losses near $90M
Ledger confirmed an unauthorized hardware implant in at least one wallet sold by Southeast Asian reseller CryptoBilis, after on-chain researchers estimated $86M–$93M drained from more than 300 wallets.
Ledger probes Malaysian reseller CryptoBilis after wallets drained of up to $86M
Ledger says it is investigating its Malaysian reseller CryptoBilis after wallets bought there were drained of an estimated $72M to over $86M, and has ordered the reseller to halt sales.
Ledger Investigates Reports of Fund Losses Tied to Reseller CryptoBilis, as Investigator Traces ~$87M
Ledger is investigating reported fund losses among Southeast Asian customers who bought hardware wallets from reseller CryptoBilis, as an onchain investigator traces roughly $87 million in suspected thefts.
Coldcard thief moves nearly half of 'Wave 3' bitcoin as total losses near 1,806 BTC
Galaxy Research says the attacker behind the Coldcard hardware-wallet thefts has moved 45% of the bitcoin taken in the "Wave 3" round, with total losses now put at roughly 1,806 BTC (~$143.9 million).
Trezor's ShipMonk breach balloons: 67,000 more customers exposed, records that should have been deleted
Trezor now says roughly 67,000 more U.S. customers had personal data exposed in a breach at its former shipping partner ShipMonk, far more than the ~14,000 it disclosed in August.
Ledger and OneKey trade claims over an Ethereum app bug that was already patched
Rival hardware wallet maker OneKey says it reproduced a transaction-replacement exploit against Ledger's Ethereum app version 1.22.1; Ledger says the flaw was patched weeks earlier and no user was affected.
SafePal says 39,798 customers' names and addresses were exposed by an order-tracking flaw
Hardware wallet maker SafePal says an authorization flaw in an order-tracking plug-in exposed names, addresses and contact details for 39,798 customers who ordered between March 2025 and April 2026.
Trezor customer data exposed through a shipping partner, Decrypt reports — scope still undisclosed
Decrypt reported on August 13 that Trezor customer data was exposed via a third-party shipping provider, with the partner's identity, the affected record count and the data fields all still undisclosed.
Trezor customer addresses exposed in breach at shipping contractor ShipMonk
Trezor says a breach at logistics contractor ShipMonk exposed names and contact details of roughly 13,700 customers, including home addresses and phone numbers for 11,742 of them.
Coldcard seed bug drives a spike in new Bitcoin addresses as users flee 2021-era wallets
Coinkite users have lost at least 1,816 BTC — roughly $116 million — in four theft waves since July 30, traced to a 2021 firmware bug that generated wallet seeds with a weak software random number generator.
Coldcard wallet drain reaches $88 million, per Decrypt — with the mechanism still unspecified
Decrypt reports that losses from an exploit hitting Coldcard bitcoin wallets have reached $88 million and are still climbing, with the attack vector and vendor response not yet specified.
CZ warns Bitcoin holders after reported $70 million Coldcard exploit
Decrypt reported on August 1 that Binance founder Changpeng Zhao warned Bitcoin holders after a roughly $70 million exploit involving Coldcard hardware wallets, with the attack path still unspecified.
Galaxy puts the Coldcard drain at 1,082 BTC across 1,196 wallets — roughly double the first count
Galaxy Research says an attacker swept 1,082.65 BTC from 1,196 Coldcard wallets in 41 minutes on July 30 by reconstructing weakly generated seeds offline, without touching a single device.
Trezor executive concedes hardware wallets are "clunky" but rejects ZachXBT's "complete garbage" verdict
On-chain investigator ZachXBT called all hardware wallets "complete garbage" for high-stakes use; Trezor's commercial chief conceded the tools are "clunky" but rejected the blanket verdict, while Tornado Cash's Roman Storm sided partly with ZachXBT.