{"name":"WalletInsights hardware wallet security incident tracker","publisher":{"name":"WalletInsights","url":"https://walletinsights.io"},"license":"https://creativecommons.org/licenses/by/4.0/","attribution":"WalletInsights (walletinsights.io) — link to the incident's url","methodology":"https://walletinsights.io/en/security-incidents/","csv":"https://walletinsights.io/data/security-incidents.csv","count":47,"fields":[{"name":"slug","description":"Stable identifier; also the permalink path."},{"name":"url","description":"Permalink on the tracker."},{"name":"title","description":"Short headline."},{"name":"date","description":"Date of disclosure (YYYY-MM-DD)."},{"name":"brand","description":"Vendor the incident concerns."},{"name":"affected_models","description":"Models in the catalog that are affected; older models are named in the text."},{"name":"type","description":"firmware-vulnerability, hardware-attack, supply-chain, software-vulnerability, data-breach, vendor-infrastructure or phishing."},{"name":"severity","description":"critical, high, medium or low; rubric on the tracker page."},{"name":"attack_vector","description":"remote, user-action, physical-access, supply-chain or not-applicable."},{"name":"fix_status","description":"fixed, mitigated, unpatchable, open or not-applicable."},{"name":"fixed_in","description":"Firmware or app version with the fix."},{"name":"disclosed_by","description":"vendor, researcher, press or community."},{"name":"disclosed_by_name","description":"Who made it public."},{"name":"funds_lost_usd_min","description":"Lowest published estimate of stolen funds, USD; empty when none was published."},{"name":"funds_lost_usd_max","description":"Highest published estimate, USD; equal to min or empty when estimates agree."},{"name":"vendor_statement_url","description":"The vendor's own statement."},{"name":"sources","description":"Independent sources, at least two sites (CSV: separated by ' | ')."},{"name":"verified_at","description":"Date the entry was last checked against its sources."}],"incidents":[{"slug":"trezor-cryptobilis-implant-report-2026","url":"https://walletinsights.io/en/security-incidents/trezor-cryptobilis-implant-report-2026/","title":"Suspected implant in a Trezor Safe 5 sold by CryptoBilis","date":"2026-10-30","brand":"Trezor","affected_models":["Trezor Safe 5"],"type":"supply-chain","severity":"high","attack_vector":"supply-chain","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Trezor","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://trezor.io/blog/news/implant-reported-in-a-trezor-sold-by-cryptobilis","sources":["https://trezor.io/blog/news/implant-reported-in-a-trezor-sold-by-cryptobilis","https://www.theblock.co/news/ecosystems/2026-10-30-trezor-reports-suspected-hardware-implant-432196","https://www.bleepingcomputer.com/news/security/trezor-warns-of-suspected-crypto-theft-implant-in-hardware-wallet/"],"verified_at":"2026-10-31"},{"slug":"foundation-passport-phishing-backend-breach-2026","url":"https://walletinsights.io/en/security-incidents/foundation-passport-phishing-backend-breach-2026/","title":"Phishing emails sent from Foundation's own systems to Passport owners","date":"2026-10-26","brand":"Foundation","affected_models":[],"type":"vendor-infrastructure","severity":"high","attack_vector":"user-action","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Foundation","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://community.foundation.xyz/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296","sources":["https://community.foundation.xyz/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296","https://gizmodo.com/two-more-crypto-hardware-wallet-manufacturers-have-been-hacked-2000830786","https://beincrypto.com/bitcoin-wallet-phishing-foundation-home-addresses/","https://www.criptonoticias.com/seguridad-bitcoin/filtracion-foundation-datos-personales-phishing/"],"verified_at":"2026-11-03"},{"slug":"keystone-website-breach-2026","url":"https://walletinsights.io/en/security-incidents/keystone-website-breach-2026/","title":"Keystone website breach exposed buyer data and the device authentication key","date":"2026-10-20","brand":"Keystone","affected_models":["Keystone 3 Pro"],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Keystone","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":null,"sources":["https://gizmodo.com/two-more-crypto-hardware-wallet-manufacturers-have-been-hacked-2000830786","https://news.bitcoin.com/security/keystone-breach-deepens-18835-crypto-hardware-wallets-face-destruction/","https://www.theblock.co/news/business/2026-10-25-keystone-customers-say-breach-exposed-data-the-hardware-wallet-maker-promised-to-delete-431613"],"verified_at":"2026-11-02"},{"slug":"ngrave-liquid-push-notification-phishing-2026","url":"https://walletinsights.io/en/security-incidents/ngrave-liquid-push-notification-phishing-2026/","title":"Hijacked NGRAVE push notifications lead to $2.56M phishing theft","date":"2026-10-19","brand":"Ngrave","affected_models":[],"type":"vendor-infrastructure","severity":"high","attack_vector":"user-action","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"NGRAVE","funds_lost_usd_min":2560000,"funds_lost_usd_max":2650000,"vendor_statement_url":"https://www.ngrave.io/en/blog/incident-report-fake-liquid-security-alert-17-october","sources":["https://www.ngrave.io/en/blog/incident-report-fake-liquid-security-alert-17-october","https://news.bitcoin.com/security/crypto-thieves-hijack-ngrave-alerts-and-walk-away-with-2-56m/","https://cryptoticker.io/en/ngrave-push-phishing-wallet-theft/"],"verified_at":"2026-11-03"},{"slug":"ledger-cryptobilis-hardware-implant-2026","url":"https://walletinsights.io/en/security-incidents/ledger-cryptobilis-hardware-implant-2026/","title":"Hardware implants in Ledger devices sold by CryptoBilis","date":"2026-10-13","brand":"Ledger","affected_models":[],"type":"supply-chain","severity":"high","attack_vector":"supply-chain","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":86000000,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.ledger.com/blog-response-hardware-implant-attack","sources":["https://www.ledger.com/blog-response-hardware-implant-attack","https://www.coindesk.com/tech/2026/10/13/ledger-says-spy-chip-inside-cryptobilis-ledger-devices-transmitted-wallet-keys-over-mobile-network","https://theblock.co/news/business/2026-10-13-ledger-confirms-hardware-implant-cryptobilis-reseller-units-mediamarkt-suspends-sales-europe-418442","https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/"],"verified_at":"2026-11-02"},{"slug":"ledger-ethereum-app-clear-signing-array-truncation-2026","url":"https://walletinsights.io/en/security-incidents/ledger-ethereum-app-clear-signing-array-truncation-2026/","title":"Ledger Ethereum app clear-signing bypass hid all but one operation of a large batch","date":"2026-08-27","brand":"Ledger","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Ethereum app 1.22.3","disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon (reported by Felipe A. Manzano, Bitfinding)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/024/","sources":["https://donjon.ledger.com/lsb/024/","https://cryptoslate.com/ledger-says-the-viral-hack-was-already-patched-but-two-real-bugs-still-needed-fixing/","https://coin360.com/news/ledger-ethereum-signing-flaws-onekey","https://decrypt.co/376750/no-ledger-wasnt-hacked-ethereum-app-exploit"],"verified_at":"2026-11-04"},{"slug":"ledger-ethereum-app-swap-approval-substitution-2026","url":"https://walletinsights.io/en/security-incidents/ledger-ethereum-app-swap-approval-substitution-2026/","title":"Ledger Ethereum app swap flow could sign a token approval in place of a payment","date":"2026-08-27","brand":"Ledger","affected_models":[],"type":"firmware-vulnerability","severity":"low","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Ethereum app 1.22.3","disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon (found by Ledger's internal automated review)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/025/","sources":["https://donjon.ledger.com/lsb/025/","https://cryptoslate.com/ledger-says-the-viral-hack-was-already-patched-but-two-real-bugs-still-needed-fixing/","https://coin360.com/news/ledger-ethereum-signing-flaws-onekey"],"verified_at":"2026-11-04"},{"slug":"ledger-secure-sdk-review-signature-desync-2026","url":"https://walletinsights.io/en/security-incidents/ledger-secure-sdk-review-signature-desync-2026/","title":"Ledger Secure SDK flaw let a host change transaction details after on-screen review","date":"2026-08-27","brand":"Ledger","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Secure SDK v26.6.1 (apps rebuilt 21 Aug 2026); Ethereum app 1.22.2","disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon (found by Ledger's internal security review)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/023/","sources":["https://donjon.ledger.com/lsb/023/","https://decrypt.co/376750/no-ledger-wasnt-hacked-ethereum-app-exploit","https://coin360.com/news/ledger-ethereum-signing-flaws-onekey","https://cryptoslate.com/ledger-says-the-viral-hack-was-already-patched-but-two-real-bugs-still-needed-fixing/"],"verified_at":"2026-11-04"},{"slug":"bitbox02-dixence-firmware-flaws-2026","url":"https://walletinsights.io/en/security-incidents/bitbox02-dixence-firmware-flaws-2026/","title":"BitBox02 firmware flaws could let attackers install malicious firmware","date":"2026-08-17","brand":"BitBox","affected_models":["BitBox02","BitBox02 Nova"],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"BitBox02 / BitBox02 Nova firmware 9.26.5","disclosed_by":"vendor","disclosed_by_name":"BitBox (Shift Crypto)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.bitbox.swiss/en/bitbox-08-2026-dixence-update/","sources":["https://decrypt.co/375886/bitcoin-wallet-bitbox-ai-severe-flaws-firmware","https://forklog.com/en/bitbox-fixes-two-major-vulnerabilities-in-bitcoin-wallet-firmware/","https://cryptobriefing.com/bitbox-ai-firmware-flaws-bitcoin-wallets/","https://dailycoin.com/cold-storage-reality-check-certik-uncovers-usb-flaw-in-bitbox-wallets/","https://github.com/BitBoxSwiss/bitbox02-firmware/releases/tag/firmware/v9.26.5"],"verified_at":"2026-11-03"},{"slug":"safepal-customer-order-data-breach-2026","url":"https://walletinsights.io/en/security-incidents/safepal-customer-order-data-breach-2026/","title":"SafePal order-tracking flaw exposes data of 39,798 customers","date":"2026-08-16","brand":"SafePal","affected_models":[],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"SafePal","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.safepal.com/en/blog/security-update","sources":["https://www.bleepingcomputer.com/news/security/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale/","https://theblock.co/news/business/2026-08-16-wallet-provider-safepal-says-data-breach-exposed-personal-info-of-nearly-40000-customers-411934","https://www.safepal.com/en/blog/security-update"],"verified_at":"2026-11-03"},{"slug":"trezor-shipmonk-customer-data-breach-2026","url":"https://walletinsights.io/en/security-incidents/trezor-shipmonk-customer-data-breach-2026/","title":"Breach at shipping provider ShipMonk exposes data of up to 80,689 Trezor customers","date":"2026-08-13","brand":"Trezor","affected_models":[],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Trezor","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident","sources":["https://www.bleepingcomputer.com/news/security/trezor-discloses-data-breach-affecting-nearly-14-000-customers/","https://theblock.co/news/business/2026-09-04-trezor-says-shipmonk-breach-affected-another-67000-customers-413540","https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident"],"verified_at":"2026-11-03"},{"slug":"bitkey-relationship-enrollment-weak-randomness-2026","url":"https://walletinsights.io/en/security-incidents/bitkey-relationship-enrollment-weak-randomness-2026/","title":"Bitkey app used a non-cryptographic random generator for contact enrollment","date":"2026-08-02","brand":"Bitkey","affected_models":[],"type":"software-vulnerability","severity":"low","attack_vector":"remote","fix_status":"fixed","fixed_in":"Bitkey app 2026.11.2","disclosed_by":"vendor","disclosed_by_name":"Bitkey (reported by @1440000bytes)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://bitkey.world/blog/relationship-enrollment-bug-in-bitkey","sources":["https://bitkey.world/blog/relationship-enrollment-bug-in-bitkey","https://bitkey.world/security-updates","https://cryptobriefing.com/bitkey-patches-vulnerability-no-funds-at-risk/"],"verified_at":"2026-11-03"},{"slug":"coldcard-weak-seed-generation-2026","url":"https://walletinsights.io/en/security-incidents/coldcard-weak-seed-generation-2026/","title":"COLDCARD firmware generated weak seeds","date":"2026-07-30","brand":"Coinkite","affected_models":["Coinkite Coldcard Mk4","Coinkite Coldcard Mk5","Coinkite Coldcard Q"],"type":"firmware-vulnerability","severity":"critical","attack_vector":"remote","fix_status":"fixed","fixed_in":"Mk4/Mk5 5.6.0, Q 1.5.0Q, Edge 6.6.0X / 6.6.0QX","disclosed_by":"vendor","disclosed_by_name":"Coinkite","funds_lost_usd_min":150000000,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/","sources":["https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/","https://www.bleepingcomputer.com/news/security/coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft/","https://decrypt.co/375656/coldcard-bitcoin-thefts-slow-losses-top-150-million"],"verified_at":"2026-10-26"},{"slug":"tangem-laser-fault-injection-2026","url":"https://walletinsights.io/en/security-incidents/tangem-laser-fault-injection-2026/","title":"Laser fault injection bypasses Tangem card access codes","date":"2026-07-09","brand":"Tangem","affected_models":["Tangem Wallet (2 Cards)","Tangem Wallet (3 Cards)"],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"unpatchable","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://tangem.com/en/blog/post/lfi-response/","sources":["https://donjon.ledger.com/blog/bypassing-tangem-card-security-with-laser-attack/","https://tangem.com/en/blog/post/lfi-response/"],"verified_at":"2026-10-26"},{"slug":"keystone-3-pro-usb-sdk-code-execution-2026","url":"https://walletinsights.io/en/security-incidents/keystone-3-pro-usb-sdk-code-execution-2026/","title":"USB SDK flaw allowed code execution on an unlocked Keystone 3 Pro","date":"2026-07-03","brand":"Keystone","affected_models":["Keystone 3 Pro"],"type":"firmware-vulnerability","severity":"high","attack_vector":"physical-access","fix_status":"fixed","fixed_in":"Keystone 3 Pro firmware 2.4.0","disclosed_by":"researcher","disclosed_by_name":"OneKey ANZEN (joint disclosure with Keystone)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://x.com/KeystoneWallet/article/2072848021633851534","sources":["https://x.com/KeystoneWallet/article/2072848021633851534","https://onekey.so/blog/learn/usb-sdk-vulnerability-hardware-wallet-seed-extraction/","https://blackhat.com/us-26/briefings/schedule/#from-8-bytes-to-full-compromise-ai-assisted-exploitation-of-a-widespread-usb-flaw-in-a-multi-se-hardware-wallet-on-demand-only-52311","https://github.com/KeystoneHQ/keystone3-firmware/releases/tag/2.4.0"],"verified_at":"2026-11-03"},{"slug":"ledger-monero-app-keccak-state-key-recovery-2026","url":"https://walletinsights.io/en/security-incidents/ledger-monero-app-keccak-state-key-recovery-2026/","title":"Ledger Monero app exposed Keccak state, letting a compromised host recover spend keys","date":"2026-06-04","brand":"Ledger","affected_models":["Ledger Nano S Plus","Ledger Nano X"],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Monero app 2.1.4","disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/022/","sources":["https://donjon.ledger.com/lsb/022/","https://github.com/LedgerHQ/app-monero/blob/master/CHANGELOG.md","https://cryptoslate.com/crypto-wallets/ledger-nano-x-wallet-review/"],"verified_at":"2026-11-04"},{"slug":"tropic01-laser-fault-injection-trezor-safe-7-2026","url":"https://walletinsights.io/en/security-incidents/tropic01-laser-fault-injection-trezor-safe-7-2026/","title":"Laser fault injection bypasses firmware checks on Trezor Safe 7's TROPIC01 chip","date":"2026-06-03","brand":"Trezor","affected_models":["Trezor Safe 7"],"type":"hardware-attack","severity":"low","attack_vector":"physical-access","fix_status":"unpatchable","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Ledger Donjon (Charles Christen, Leo Benito); Tropic Square","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://trezor.io/blog/news/Trezor-response-TROPIC01-chip-disclosure-no-impact-to-your-funds","sources":["https://donjon.ledger.com/blog/tropic01-laser-fault-injection/","https://tropicsquare.com/news-and-events/tropic01-security-advisory-lfi-vulnerability-disclosure-and-mitigation","https://www.theblock.co/news/business/2026-06-03-ledger-researchers-find-flaw-in-chip-used-by-trezor-safe-7-trezor-says-user-funds-safe-403492","https://trezor.io/blog/news/Trezor-response-TROPIC01-chip-disclosure-no-impact-to-your-funds"],"verified_at":"2026-11-03"},{"slug":"fake-ledger-live-apple-app-store-2026","url":"https://walletinsights.io/en/security-incidents/fake-ledger-live-apple-app-store-2026/","title":"Fake Ledger Live app in Apple's App Store","date":"2026-04-14","brand":"Ledger","affected_models":[],"type":"phishing","severity":"high","attack_vector":"user-action","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"community","disclosed_by_name":"ZachXBT","funds_lost_usd_min":9500000,"funds_lost_usd_max":9500000,"vendor_statement_url":null,"sources":["https://www.bleepingcomputer.com/news/security/fake-ledger-live-app-on-apples-app-store-stole-95m-in-crypto/","https://www.theblock.co/post/397388/fake-ledger-app-apple-app-store-crypto-theft-bitcoin-tron-solana-zachxbt"],"verified_at":"2026-11-03"},{"slug":"ledger-global-e-order-data-breach-2026","url":"https://walletinsights.io/en/security-incidents/ledger-global-e-order-data-breach-2026/","title":"Breach at e-commerce partner Global-e exposes Ledger.com customers' order data","date":"2026-01-05","brand":"Ledger","affected_models":[],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Global-e; confirmed by Ledger","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://support.ledger.com/article/Global-e-Incident-to-Order-Data---January-2026","sources":["https://support.ledger.com/article/Global-e-Incident-to-Order-Data---January-2026","https://www.bleepingcomputer.com/news/security/ledger-customers-impacted-by-third-party-global-e-data-breach/","https://www.theblock.co/post/384275/ledger-customers-data-leak-payment-processor","https://siliconangle.com/2026/01/05/ledger-confirms-leak-customer-data-third-party-global-e/","https://www.theregister.com/2026/01/06/ledger_globale_breach/"],"verified_at":"2026-11-03"},{"slug":"blockstream-jade-register-descriptor-memory-corruption-2025","url":"https://walletinsights.io/en/security-incidents/blockstream-jade-register-descriptor-memory-corruption-2025/","title":"Blockstream Jade firmware bug let a malicious host corrupt device memory","date":"2025-12-05","brand":"Blockstream","affected_models":["Blockstream Jade Classic","Blockstream Jade Plus"],"type":"firmware-vulnerability","severity":"high","attack_vector":"remote","fix_status":"fixed","fixed_in":"Jade firmware 1.0.37 (anti-rollback in 1.0.38)","disclosed_by":"vendor","disclosed_by_name":"Blockstream (reported by DARKNAVY)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.blockstream.com/jade-security-disclosure/","sources":["https://blog.blockstream.com/important-jade-security-update/","https://blog.blockstream.com/jade-security-disclosure/","https://cryptoslate.com/crypto-wallets/blockstream-jade-plus-wallet-review/"],"verified_at":"2026-11-03"},{"slug":"ledger-donjon-trezor-safe-3-glitching-2025","url":"https://walletinsights.io/en/security-incidents/ledger-donjon-trezor-safe-3-glitching-2025/","title":"Ledger Donjon bypasses Trezor Safe 3 supply-chain protections","date":"2025-03-12","brand":"Trezor","affected_models":["Trezor Safe 3"],"type":"hardware-attack","severity":"high","attack_vector":"supply-chain","fix_status":"mitigated","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://trezor.io/vulnerability/donjon-s-trezor-safe-3-evaluation","sources":["https://trezor.io/vulnerability/donjon-s-trezor-safe-3-evaluation","https://www.ledger.com/why-secure-elements-make-a-crucial-difference-to-hardware-wallet-security","https://www.theblock.co/post/346018/trezor-discloses-vulnerability-safe-3-crypto-wallet-rival-ledger","https://cointelegraph.com/news/trezor-resolves-security-flaw-identified-by-ledger","https://forklog.com/en/ledger-identifies-vulnerability-in-trezor-wallets/"],"verified_at":"2026-11-03"},{"slug":"ledger-mcu-update-reset-handler-bricking-2025","url":"https://walletinsights.io/en/security-incidents/ledger-mcu-update-reset-handler-bricking-2025/","title":"Ledger MCU firmware update flaw could permanently brick Nano X, Flex and Stax","date":"2025-01-10","brand":"Ledger","affected_models":["Ledger Nano X","Ledger Flex","Ledger Stax"],"type":"firmware-vulnerability","severity":"low","attack_vector":"physical-access","fix_status":"fixed","fixed_in":"Nano X firmware 2.4.2, Flex 1.2.2, Stax 1.6.2","disclosed_by":"vendor","disclosed_by_name":"Ledger Donjon (reported by Guanxing Wen)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/021/","sources":["https://donjon.ledger.com/lsb/021/","https://www.vulncheck.com/advisories/ledger-nano-x-flex-stax-mcu-firmware-update-denial-of-service","https://cve.report/CVE-2025-15645"],"verified_at":"2026-11-03"},{"slug":"tangem-app-seed-phrase-logging-bug-2024","url":"https://walletinsights.io/en/security-incidents/tangem-app-seed-phrase-logging-bug-2024/","title":"Tangem app logged seed-phrase private keys sent to support","date":"2024-12-30","brand":"Tangem","affected_models":[],"type":"software-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Tangem app 5.19.1 (iOS) and 5.19.2 (Android)","disclosed_by":"community","disclosed_by_name":"Reddit user u/areklanga","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://tangem.com/en/blog/post/tangem-resolves-log-issue/","sources":["https://cointelegraph.com/news/tangem-security-vulnerability-fixed-private-key-leak","https://nobsbitcoin.com/multicoin-wallet-tangem-fixes-bug-exposing-user-private-keys","https://tangem.com/en/blog/post/tangem-resolves-log-issue/"],"verified_at":"2026-11-03"},{"slug":"eucleak-infineon-side-channel-trezor-safe-2024","url":"https://walletinsights.io/en/security-incidents/eucleak-infineon-side-channel-trezor-safe-2024/","title":"EUCLEAK side channel in Infineon ECDSA library reaches Trezor Safe 3 and Safe 5 chip","date":"2024-09-03","brand":"Trezor","affected_models":["Trezor Safe 3","Trezor Safe 5"],"type":"hardware-attack","severity":"low","attack_vector":"physical-access","fix_status":"open","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"NinjaLab (Thomas Roche)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://x.com/Trezor/status/1831256973242716623","sources":["https://ninjalab.io/eucleak/","https://eprint.iacr.org/2024/1380","https://www.bleepingcomputer.com/news/security/new-eucleak-attack-let-attackers-clone-yubikey-fido-keys/","https://x.com/Trezor/status/1831256973242716623","https://criptonoticias.com/tecnologia/vulnerabilidad-14-anos-wallets-criptomonedas-secure-element-ataque-eucleack","https://trezor.io/learn/a/secure-element-in-trezor-safe-devices"],"verified_at":"2026-11-03"},{"slug":"trezor-support-portal-data-breach-2024","url":"https://walletinsights.io/en/security-incidents/trezor-support-portal-data-breach-2024/","title":"Trezor support portal breach exposes 66,000 contacts","date":"2024-01-17","brand":"Trezor","affected_models":[],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Trezor","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/trezor-security-update-stay-vigilant-against-potential-phishing-attack-bb05015a21f8","sources":["https://www.bleepingcomputer.com/news/security/trezor-support-site-breach-exposes-personal-data-of-66-000-customers/","https://cointelegraph.com/news/trezor-discloses-66k-users-affected-phishing-attack"],"verified_at":"2026-11-03"},{"slug":"ledger-connect-kit-supply-chain-attack-2023","url":"https://walletinsights.io/en/security-incidents/ledger-connect-kit-supply-chain-attack-2023/","title":"Ledger Connect Kit npm supply-chain attack","date":"2023-12-14","brand":"Ledger","affected_models":[],"type":"supply-chain","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Connect Kit 1.1.8","disclosed_by":"researcher","disclosed_by_name":"Blockaid and other ecosystem parties; confirmed by Ledger the same day","funds_lost_usd_min":484000,"funds_lost_usd_max":600000,"vendor_statement_url":"https://www.ledger.com/blog/security-incident-report","sources":["https://www.ledger.com/blog/security-incident-report","https://www.ledger.com/blog/a-letter-from-ledger-chairman-ceo-pascal-gauthier-regarding-ledger-connect-kit-exploit","https://www.coindesk.com/business/2023/12/14/ledger-exploit-drained-484k-upended-defi-former-staffer-linked-to-malicious-code","https://www.theblock.co/post/267614/ledger-connectkit-library-security-flaw-dapps-compromised","https://forklog.com/en/ledger-puts-estimated-user-losses-from-recent-breach-at-about-600000/"],"verified_at":"2026-11-03"},{"slug":"fake-ledger-live-microsoft-store-2023","url":"https://walletinsights.io/en/security-incidents/fake-ledger-live-microsoft-store-2023/","title":"Fake Ledger Live app in the Microsoft Store","date":"2023-11-05","brand":"Ledger","affected_models":[],"type":"phishing","severity":"high","attack_vector":"user-action","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"community","disclosed_by_name":"ZachXBT","funds_lost_usd_min":768000,"funds_lost_usd_max":770000,"vendor_statement_url":null,"sources":["https://www.coindesk.com/business/2023/11/06/microsoft-listing-fake-ledger-app-leads-to-590k-of-bitcoin-stolen-by-hackers","https://blog.eset.ie/2023/11/08/fake-ledger-live-app-in-microsoft-store-steals-768000-in-crypto/","https://www.bitdefender.com/blog/hotforsecurity/rogue-developer-steals-768-000-in-crypto-with-fake-ledger-live-app/"],"verified_at":"2026-11-03"},{"slug":"counterfeit-trezor-model-t-preset-seeds-2023","url":"https://walletinsights.io/en/security-incidents/counterfeit-trezor-model-t-preset-seeds-2023/","title":"Counterfeit Trezor Model T with modified bootloader and preset seeds","date":"2023-05-10","brand":"Trezor","affected_models":[],"type":"supply-chain","severity":"high","attack_vector":"supply-chain","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Kaspersky","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":null,"sources":["https://www.kaspersky.com/blog/fake-trezor-hardware-crypto-wallet/48155/","https://cointelegraph.com/news/trusted-seller-vends-fake-trezor-wallets-stealing-crypto-kaspersky","https://news.bitcoin.com/kaspersky-uncovers-counterfeit-trezor-wallets-that-jeopardize-crypto-assets/"],"verified_at":"2026-11-03"},{"slug":"onekey-mini-secure-element-bus-interception-2023","url":"https://walletinsights.io/en/security-incidents/onekey-mini-secure-element-bus-interception-2023/","title":"OneKey Mini and Touch seed extraction via secure element bus","date":"2023-02-10","brand":"OneKey","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"fixed","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Unciphered","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":null,"sources":["https://nvd.nist.gov/vuln/detail/CVE-2023-25758","https://cointelegraph.com/news/onekey-says-it-s-fixed-the-flaw-that-got-its-hardware-wallet-hacked-in-1-second","https://www.theblock.co/post/210665/security-firm-unciphered-hacked-into-popular-hardware-wallet-onekey"],"verified_at":"2026-11-03"},{"slug":"trezor-mailchimp-newsletter-phishing-2022","url":"https://walletinsights.io/en/security-incidents/trezor-mailchimp-newsletter-phishing-2022/","title":"Trezor's Mailchimp newsletter used to send fake Trezor Suite","date":"2022-04-03","brand":"Trezor","affected_models":[],"type":"vendor-infrastructure","severity":"high","attack_vector":"user-action","fix_status":"mitigated","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Trezor","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/details-of-the-mailchimp-data-breach-a06872caa1fd","sources":["https://www.bleepingcomputer.com/news/security/fake-trezor-data-breach-emails-used-to-steal-cryptocurrency-wallets/","https://www.theblock.co/linked/140346","https://techcrunch.com/2022/04/04/mailchimp-internal-tool-breach/"],"verified_at":"2026-11-03"},{"slug":"fake-ledger-devices-mailed-to-breach-victims-2021","url":"https://walletinsights.io/en/security-incidents/fake-ledger-devices-mailed-to-breach-victims-2021/","title":"Fake Ledger Nano X devices mailed to data breach victims","date":"2021-06-16","brand":"Ledger","affected_models":[],"type":"phishing","severity":"high","attack_vector":"user-action","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"community","disclosed_by_name":"A Reddit user who received the device; hardware analysis by Mike Grover","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":null,"sources":["https://www.bleepingcomputer.com/news/cryptocurrency/criminals-are-mailing-altered-ledger-devices-to-steal-cryptocurrency/","https://www.vice.com/en/article/criminals-are-sending-malicious-hardware-wallets-to-steal-peoples-crypto/","https://cointelegraph.com/news/scammers-mail-out-fake-hardware-wallets-to-victims-of-ledger-data-breach"],"verified_at":"2026-11-03"},{"slug":"kraken-safepal-s1-tamper-detection-bypass-2021","url":"https://walletinsights.io/en/security-incidents/kraken-safepal-s1-tamper-detection-bypass-2021/","title":"Kraken bypasses SafePal S1 tamper detection and downgrades its firmware","date":"2021-02-16","brand":"SafePal","affected_models":["SafePal S1"],"type":"hardware-attack","severity":"low","attack_vector":"physical-access","fix_status":"mitigated","fixed_in":"SafePal S1 firmware 1.0.24 (downgrade protection)","disclosed_by":"researcher","disclosed_by_name":"Kraken Security Labs","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.safepal.com/blog/our-response-to-the-security-findings-from-kraken-security-labs","sources":["https://blog.kraken.com/product/security/kraken-security-labs-finds-flaws-in-safepal-s1-hardware-wallet","https://www.safepal.com/blog/our-response-to-the-security-findings-from-kraken-security-labs"],"verified_at":"2026-11-03"},{"slug":"coldcard-multisig-xpub-substitution-2021","url":"https://walletinsights.io/en/security-incidents/coldcard-multisig-xpub-substitution-2021/","title":"Coldcard registered multisig wallets without checking it was a cosigner","date":"2021-02-09","brand":"Coinkite","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"remote","fix_status":"fixed","fixed_in":"Coldcard firmware 3.2.1 (Coinkite recommends 3.2.2)","disclosed_by":"researcher","disclosed_by_name":"Hugo Nguyen (Nunchuk) and Marko Bencun (Shift Crypto)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.coinkite.com/multisig-security-upgrade/","sources":["https://benma.github.io/2021/02/09/coldcard-multisig-vulnerability.html","https://nunchuk.io/blog/the-missing-multisig-standard-rJDAu8d4s4Mg85ATpYrNJT","https://blog.coinkite.com/multisig-security-upgrade/","https://criptonoticias.com/tecnologia/coinkite-habria-ocultado-monederos-vulnerables-ataques-remotos"],"verified_at":"2026-11-03"},{"slug":"coldcard-testnet-isolation-bypass-2020","url":"https://walletinsights.io/en/security-incidents/coldcard-testnet-isolation-bypass-2020/","title":"Coldcard testnet mode could be used to sign a real bitcoin transaction","date":"2020-11-24","brand":"Coinkite","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Coldcard firmware 3.2.1","disclosed_by":"researcher","disclosed_by_name":"Marko Bencun (Shift Crypto)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.coinkite.com/testnet-considered-useful/","sources":["https://blog.coinkite.com/testnet-considered-useful/","https://criptonoticias.com/seguridad-bitcoin/vulnerabilidad-monedero-coldcard-permitiria-robar-bitcoins-ingenieria-social","https://journalducoin.com/bitcoin/cauchemar-des-bitcoiners-faille-corrigee-eviter-perdre-betement-bitcoins/","https://coinkite.com/historical-disclosures"],"verified_at":"2026-11-03"},{"slug":"ledger-customer-database-breach-2020","url":"https://walletinsights.io/en/security-incidents/ledger-customer-database-breach-2020/","title":"Ledger customer database breach","date":"2020-07-29","brand":"Ledger","affected_models":[],"type":"data-breach","severity":"medium","attack_vector":"not-applicable","fix_status":"not-applicable","fixed_in":null,"disclosed_by":"vendor","disclosed_by_name":"Ledger, after a report from a bug bounty researcher","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.ledger.com/addressing-the-july-2020-e-commerce-and-marketing-data-breach","sources":["https://www.ledger.com/addressing-the-july-2020-e-commerce-and-marketing-data-breach","https://www.theblock.co/post/73238/ledger-data-breach-customer-emails","https://www.theblock.co/linked/88596/database-containing-personal-information-of-over-270000-ledger-customers-released-on-raidforums","https://www.ledger.com/blog/our-communications-about-data-breach","https://www.ledger.com/blog/update-efforts-to-protect-your-data-and-prosecute-the-scammers"],"verified_at":"2026-11-03"},{"slug":"ledger-nano-x-debug-interface-supply-chain-attacks-2020","url":"https://walletinsights.io/en/security-incidents/ledger-nano-x-debug-interface-supply-chain-attacks-2020/","title":"Ledger Nano X debug interface enabled supply-chain attacks (Kraken)","date":"2020-07-08","brand":"Ledger","affected_models":["Ledger Nano X"],"type":"hardware-attack","severity":"high","attack_vector":"supply-chain","fix_status":"fixed","fixed_in":"Ledger Nano X firmware 1.2.4-2","disclosed_by":"researcher","disclosed_by_name":"Kraken Security Labs","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/013/","sources":["https://blog.kraken.com/product/security/kraken-security-labs-supply-chain-attacks-against-ledger-nano-x","https://donjon.ledger.com/lsb/013/","https://cointelegraph.com/news/kraken-discovers-supply-chain-attacks-against-ledger-wallets"],"verified_at":"2026-11-03"},{"slug":"ledger-bitcoin-app-segwit-fee-overpayment-2020","url":"https://walletinsights.io/en/security-incidents/ledger-bitcoin-app-segwit-fee-overpayment-2020/","title":"Ledger Bitcoin app SegWit fee overpayment vulnerability","date":"2020-06-03","brand":"Ledger","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Bitcoin app 1.4.0","disclosed_by":"researcher","disclosed_by_name":"Saleem Rashid","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/010/","sources":["https://donjon.ledger.com/lsb/010/","https://bitcoinops.org/en/newsletters/2020/06/10/","https://decrypt.co/31463/bitcoin-segwit-bug-fix-could-lock-wallet-users-out-funds"],"verified_at":"2026-11-03"},{"slug":"trezor-segwit-double-signing-fee-2020","url":"https://walletinsights.io/en/security-incidents/trezor-segwit-double-signing-fee-2020/","title":"SegWit double-signing flaw could make Trezor users pay a huge fee","date":"2020-06-03","brand":"Trezor","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Trezor One firmware 1.9.1; Trezor Model T firmware 2.3.1","disclosed_by":"vendor","disclosed_by_name":"Trezor (reported by Saleem Rashid)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd","sources":["https://cveawg.mitre.org/api/cve/CVE-2020-14199","https://criptonoticias.com/seguridad-bitcoin/nueva-actualizacion-trezor-corrige-vulnerabilidad-gestion-transacciones-segwit","https://web.archive.org/web/20250326073328/https://trezor.io/learn/a/past-security-issues"],"verified_at":"2026-11-03"},{"slug":"ledger-monero-app-spend-key-extraction-2020","url":"https://walletinsights.io/en/security-incidents/ledger-monero-app-spend-key-extraction-2020/","title":"Ledger Monero app spend key extraction (CVE-2020-6861)","date":"2020-04-25","brand":"Ledger","affected_models":["Ledger Nano X"],"type":"firmware-vulnerability","severity":"high","attack_vector":"user-action","fix_status":"fixed","fixed_in":"Ledger Monero app 1.5.1","disclosed_by":"researcher","disclosed_by_name":"Dušan Klinec and Miroslav Svitok","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/008/","sources":["https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html","https://donjon.ledger.com/lsb/008/","https://donjon.ledger.com/lsb/007/"],"verified_at":"2026-11-03"},{"slug":"kraken-coolwallet-s-app-seed-pin-exposure-2020","url":"https://walletinsights.io/en/security-incidents/kraken-coolwallet-s-app-seed-pin-exposure-2020/","title":"Kraken finds CoolWallet S app leaked seed, PIN and pairing password","date":"2020-04-03","brand":"CoolWallet","affected_models":[],"type":"software-vulnerability","severity":"high","attack_vector":"physical-access","fix_status":"mitigated","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Kraken Security Labs","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.coolwallet.io/blogs/blog/our-response-to-kraken-security-labs","sources":["https://blog.kraken.com/product/security/inside-kraken-security-labs-flaws-found-in-coolwallet-s-hardware-wallets","https://www.coolwallet.io/blogs/blog/our-response-to-kraken-security-labs"],"verified_at":"2026-11-03"},{"slug":"kraken-trezor-voltage-glitch-seed-extraction-2020","url":"https://walletinsights.io/en/security-incidents/kraken-trezor-voltage-glitch-seed-extraction-2020/","title":"Kraken extracts Trezor One and Model T seeds by voltage glitching","date":"2020-01-31","brand":"Trezor","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"unpatchable","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Kraken Security Labs","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/our-response-to-the-read-protection-downgrade-attack-28d23f8949c6","sources":["https://blog.kraken.com/news/security/kraken-identifies-critical-flaw-in-trezor-hardware-wallets","https://www.theblock.co/post/54631/kraken-security-labs-hackers-can-exploit-trezor-hardware-wallets-with-only-15-minutes-of-physical-access-to-the-device","https://decrypt.co/18125/kraken-hacked-trezors-bitcoin-wallets-in-just-15-minutes"],"verified_at":"2026-11-03"},{"slug":"ledger-donjon-trezor-seed-extraction-2019","url":"https://walletinsights.io/en/security-incidents/ledger-donjon-trezor-seed-extraction-2019/","title":"Ledger Donjon extracts Trezor seeds in minutes with physical access","date":"2019-07-01","brand":"Trezor","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"unpatchable","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/our-response-to-the-donjon-team-seed-extraction-attack-dd8417749664","sources":["https://www.ledger.com/blog/Unfixable-Key-Extraction-Attack-on-Trezor","https://beincrypto.com/ledger-researchers-uncover-seed-extraction-exploit-trezor-wallets"],"verified_at":"2026-11-03"},{"slug":"ledger-donjon-ellipal-ec01-flash-dump-2019","url":"https://walletinsights.io/en/security-incidents/ledger-donjon-ellipal-ec01-flash-dump-2019/","title":"Ledger Donjon dumps encrypted keys from the Ellipal EC01 via debug ports","date":"2019-06-25","brand":"Ellipal","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"mitigated","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Ledger Donjon","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.ellipal.com/blogs/security-research/ledger-donjon-vulnerability-study-and-the-development-of-the-ellipal-titan","sources":["https://www.ledger.com/blog/Ellipal-Security","https://www.ellipal.com/blogs/security-research/ledger-donjon-vulnerability-study-and-the-development-of-the-ellipal-titan"],"verified_at":"2026-11-03"},{"slug":"trezor-one-glitching-memory-readout-fixes-2019","url":"https://walletinsights.io/en/security-incidents/trezor-one-glitching-memory-readout-fixes-2019/","title":"Trezor One 1.8.0 fixes glitching attacks that read the seed from memory","date":"2019-03-06","brand":"Trezor","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"fixed","fixed_in":"Trezor One firmware 1.8.0; Trezor Model T firmware 2.1.0","disclosed_by":"researcher","disclosed_by_name":"wallet.fail (Thomas Roth, Dmitry Nedospasov, Josh Datko); Colin O'Flynn","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/details-of-security-updates-for-trezor-one-firmware-1-8-0-and-trezor-model-t-firmware-2-1-0-408e59dc012","sources":["https://bitcoinmagazine.com/culture/security-researchers-reveal-wallet-vulnerabilities-stage-35c3","http://colinoflynn.com/2019/03/glitching-trezor-using-emfi-through-the-enclosure/","https://i.blackhat.com/USA-19/Wednesday/us-19-OFlynn-MINimum-Failure-Stealing-Bitcoins-With-EMFI.pdf","https://web.archive.org/web/20250326073328/https://trezor.io/learn/a/past-security-issues"],"verified_at":"2026-11-03"},{"slug":"ledger-wallet-fail-35c3-nano-s-blue-attacks-2018","url":"https://walletinsights.io/en/security-incidents/ledger-wallet-fail-35c3-nano-s-blue-attacks-2018/","title":"wallet.fail at 35C3: Ledger Nano S MCU firmware and Ledger Blue PIN side channel","date":"2018-12-27","brand":"Ledger","affected_models":[],"type":"hardware-attack","severity":"high","attack_vector":"physical-access","fix_status":"mitigated","fixed_in":null,"disclosed_by":"researcher","disclosed_by_name":"Thomas Roth, Dmitry Nedospasov and Josh Datko (wallet.fail)","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://www.ledger.com/chaos-communication-congress-in-response-to-wallet-fails-presentation","sources":["https://media.ccc.de/v/35c3-9563-wallet_fail","https://donjon.ledger.com/lsb/005/","https://www.ledger.com/chaos-communication-congress-in-response-to-wallet-fails-presentation","https://threatpost.com/cryptocurrency-wallet-hacks-spark-dustup/","https://bitcoinmagazine.com/culture/security-researchers-reveal-wallet-vulnerabilities-stage-35c3"],"verified_at":"2026-11-03"},{"slug":"ledger-nano-s-mcu-verification-bypass-2018","url":"https://walletinsights.io/en/security-incidents/ledger-nano-s-mcu-verification-bypass-2018/","title":"Ledger Nano S MCU firmware verification bypass","date":"2018-03-20","brand":"Ledger","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"physical-access","fix_status":"fixed","fixed_in":"Nano S firmware 1.4.1","disclosed_by":"researcher","disclosed_by_name":"Saleem Rashid","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://donjon.ledger.com/lsb/002/","sources":["https://donjon.ledger.com/lsb/002/","https://www.ledger.com/firmware-1-4-deep-dive-security-fixes","https://saleemrashid.com/2018/03/20/breaking-ledger-security-model/","https://krebsonsecurity.com/2018/03/15-year-old-finds-flaw-in-ledger-crypto-wallet/"],"verified_at":"2026-11-03"},{"slug":"trezor-one-sram-seed-extraction-2017","url":"https://walletinsights.io/en/security-incidents/trezor-one-sram-seed-extraction-2017/","title":"Trezor One firmware left seed in RAM, readable with physical access","date":"2017-08-17","brand":"Trezor","affected_models":[],"type":"firmware-vulnerability","severity":"high","attack_vector":"physical-access","fix_status":"fixed","fixed_in":"Trezor One firmware 1.5.2","disclosed_by":"researcher","disclosed_by_name":"Anonymous researcher via SatoshiLabs' responsible disclosure programme; public write-up by Saleem Rashid","funds_lost_usd_min":null,"funds_lost_usd_max":null,"vendor_statement_url":"https://blog.trezor.io/fixing-physical-memory-access-issue-in-trezor-2b9b46bb4522","sources":["https://saleemrashid.com/2017/08/17/extracting-trezor-secrets-sram/","https://etherworld.co/trezor-firmware-security-update-1-5-2","https://github.com/orgs/trezor/discussions/44","https://decrypt.co/91250/hacker-helps-recover-2m-worth-crypto-trezor-wallet","https://cointelegraph.com/news/engineer-hacks-trezor-wallet-recovers-2m-in-lost-crypto"],"verified_at":"2026-11-03"}]}