Trezor
Suspected implant in a Trezor Safe 5 sold by CryptoBilis
HighSupply chainMitigated
One reported unit, not yet examined by Trezor at the time of writing. The report concerns how a device reached a buyer, not the device design.
Hardware wallet security incidents
A sourced record of vulnerabilities, attacks on devices, tampered units, vendor data breaches and targeted phishing. Each entry cites at least two independent sources and states whether the problem is fixed.
In numbers
- Incidents recorded
- 47
- Period: 2017–2026
- Reported losses
- $249M+
- $249.3M–$249.5M · Sum of published estimates for 6 of the incidents; the others have no published loss figure.
- By severity
- Critical1
- High34
- Medium6
- Low6
- Fixed or mitigated
- 33of 47
- Cannot be patched
- 4of 47
- Exploitable remotely
- 4of 47
By brand
LedgerIncidents: 17
TrezorIncidents: 13
CoinkiteIncidents: 3
KeystoneIncidents: 2
SafePalIncidents: 2
TangemIncidents: 2
BitBoxIncidents: 1
BitkeyIncidents: 1
BlockstreamIncidents: 1
CoolWalletIncidents: 1
EllipalIncidents: 1
FoundationIncidents: 1
NgraveIncidents: 1
OneKeyIncidents: 1
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
Timeline
2026
Foundation
Phishing emails sent from Foundation's own systems to Passport owners
HighVendor infrastructure compromiseMitigatedThousands of Passport customers and other contacts received convincing phishing from Foundation's own domains, and about 5,600 addresses and 5,200 phone numbers are treated as exposed. Foundation states devices and funds on Passport were not compromised.
Keystone
Keystone website breach exposed buyer data and the device authentication key
MediumCustomer data breachMitigatedBuyers' names, addresses and order details are in attackers' hands, which invites targeted phishing. The stolen authentication key means the online authenticity check can no longer rule out counterfeits made with the old key.
Ngrave
Hijacked NGRAVE push notifications lead to $2.56M phishing theft
HighVendor infrastructure compromiseReported losses: $2.6M–$2.7MMitigatedLIQUID users who followed the fake alert and entered their recovery phrase or Perfect Key lost funds, about $2.56 million by NGRAVE's count; app usage data of other users was also exposed. NGRAVE states its ZERO devices and their keys were not compromised.
Ledger
Hardware implants in Ledger devices sold by CryptoBilis
HighSupply chainReported losses: $86MMitigatedBuyers of tampered units lost their recovery phrases at setup and, with them, their funds. The device design is not affected; the risk is in how the devices reached buyers.
Ledger
Ledger Ethereum app clear-signing bypass hid all but one operation of a large batch
HighFirmware vulnerabilityFixedUsers of Ledger Ethereum app 1.19.0 to 1.22.2 signing through a compromised host could approve a batch of more than 255 operations while seeing only one. Ledger describes exploitation as difficult and fixed the flaw in Ethereum app 1.22.3.
Ledger
Ledger Ethereum app swap flow could sign a token approval in place of a payment
LowFirmware vulnerabilityFixedUsers swapping tokens through Ledger's Exchange app with Ethereum app 1.20.0 to 1.22.2 could, via a hostile swap provider, sign a token approval for the agreed amount to the swap's deposit address instead of a payment. Ledger states the permission moves no funds by itself and found no evidence of exploitation.
Ledger
Ledger Secure SDK flaw let a host change transaction details after on-screen review
HighFirmware vulnerabilityFixedUsers of Ledger device apps built on Secure SDK releases from August 2025 through v26.6.0 could, if a compromised host or web page controlled the connection, approve an operation shown correctly on screen and sign different parameters. Ledger states it has no evidence of exploitation against users.
BitBox
BitBox02 firmware flaws could let attackers install malicious firmware
HighFirmware vulnerabilityFixedBitBox02 owners on older firmware could have malicious firmware installed after being phished into using a fake app, and un-set-up Multi devices were exposed to a malicious computer. BitBox reports no exploitation or stolen funds and states seeds were not affected.
SafePal
SafePal order-tracking flaw exposes data of 39,798 customers
MediumCustomer data breachNot applicableNames, contact details and shipping addresses of about 39,798 SafePal customers were exposed, and some were then targeted with phishing. SafePal states wallets and funds were not compromised by the breach itself.
Trezor
Breach at shipping provider ShipMonk exposes data of up to 80,689 Trezor customers
MediumCustomer data breachNot applicableNames, contact details and shipping addresses of up to 80,689 Trezor customers were exposed through ShipMonk, raising the risk of targeted phishing. Trezor states its systems and devices were not affected.
Bitkey
Bitkey app used a non-cryptographic random generator for contact enrollment
LowSoftware vulnerabilityFixedSecond-generation Bitkey users who enrolled Recovery Contacts or inheritance beneficiaries used secrets generated with a predictable random generator. Bitkey states the bug could not on its own give access to funds and that no customer was exploited.
Coinkite
COLDCARD firmware generated weak seeds
CriticalFirmware vulnerabilityReported losses: $150MFixedFunds on seeds generated with the affected firmware can be found and swept remotely. Current firmware is fixed, but the risk remains for funds still held on old seeds.
Tangem
Laser fault injection bypasses Tangem card access codes
HighHardware attackCannot be patchedSomeone who steals a card and has laboratory equipment can sign transactions without the access code. Cards already sold cannot be patched.
Keystone
USB SDK flaw allowed code execution on an unlocked Keystone 3 Pro
HighFirmware vulnerabilityFixedSomeone holding a Keystone 3 Pro on firmware older than 2.4.0, knowing its PIN and approving a USB connection on it could run code on its microcontroller; ANZEN says this led to the recovery phrase. Keystone reports no exploitation.
Ledger
Ledger Monero app exposed Keccak state, letting a compromised host recover spend keys
HighFirmware vulnerabilityFixedMonero holders using a Ledger Monero app older than 2.1.4 on a compromised computer could have their secret view and spend keys extracted without any prompt on the device while the app was open. Ledger states the issue is fixed in Monero app 2.1.4 and that the prerequisites considerably limit practical exploitability.
Trezor
Laser fault injection bypasses firmware checks on Trezor Safe 7's TROPIC01 chip
LowHardware attackCannot be patchedA lab attacker holding a Trezor Safe 7 can run arbitrary firmware on its TROPIC01 secure element and, per Tropic Square and Ledger, compromise its MAC-and-Destroy protection. Trezor states this alone does not expose the PIN, funds or wallet backup and that no user action is needed.
Ledger
Fake Ledger Live app in Apple's App Store
HighTargeted phishingReported losses: $9.5MNot applicableMac users who installed the fake app and entered their recovery phrase lost about $9.5 million in total, according to ZachXBT. Ledger states it never asks for the recovery phrase.
Ledger
Breach at e-commerce partner Global-e exposes Ledger.com customers' order data
MediumCustomer data breachNot applicableNames, contact details, postal addresses and order details of an undisclosed number of Ledger.com customers who bought through Global-e were exposed, raising the risk of targeted phishing. Ledger states its systems, devices and customers' crypto assets were not affected.
2025
Blockstream
Blockstream Jade firmware bug let a malicious host corrupt device memory
HighFirmware vulnerabilityFixedA Jade on firmware 1.0.24–1.0.36, unlocked and connected to a compromised computer or phone or to a malicious web page, could be crashed or made to run limited code. Blockstream states users of its own app on a clean device were not at immediate risk and no users are known to be affected.
Trezor
Ledger Donjon bypasses Trezor Safe 3 supply-chain protections
HighHardware attackMitigatedAn attacker with lab equipment could turn a Safe 3 into a device running malicious firmware that still passes authenticity checks, then sell it to a victim. Devices bought from official sources and the Safe 5 are not affected, according to Trezor.
Ledger
Ledger MCU firmware update flaw could permanently brick Nano X, Flex and Stax
LowFirmware vulnerabilityFixedA Ledger Nano X, Flex or Stax on firmware older than 2.4.2, 1.2.2 or 1.6.2 respectively could be made permanently unusable through a crafted MCU firmware update. Ledger states the impact is limited to device operability and funds were never at risk.
2024
Tangem
Tangem app logged seed-phrase private keys sent to support
HighSoftware vulnerabilityFixedUsers who activated a seed-phrase wallet and contacted Tangem support through the app within 7 days had their private key included in the logs sent to support. Tangem states fewer than 0.1% of users were affected, the logs were deleted and no funds were lost.
Trezor
EUCLEAK side channel in Infineon ECDSA library reaches Trezor Safe 3 and Safe 5 chip
LowHardware attackNot fixedAn attacker with physical access and laboratory equipment could, per NinjaLab, extract ECDSA keys from the OPTIGA Trust M chip used in the Trezor Safe 3 and Safe 5. Trezor states the recovery seed and funds are not at risk because that cryptography does not protect the wallet backup.
Trezor
Trezor support portal breach exposes 66,000 contacts
MediumCustomer data breachNot applicableNames and email addresses of up to 66,000 support contacts were exposed, and some then received emails asking for their recovery seed. Trezor states no funds were compromised and the devices were unaffected.
2023
Ledger
Ledger Connect Kit npm supply-chain attack
HighSupply chainReported losses: $484K–$600KFixedUsers of dApps that loaded the compromised library, with any wallet, could be drained by approving malicious transactions during a window of under two hours. Ledger devices and Ledger Live were not compromised, according to Ledger.
Ledger
Fake Ledger Live app in the Microsoft Store
HighTargeted phishingReported losses: $768K–$770KNot applicableWindows users who installed the fake app from the Microsoft Store lost about $768,000–$770,000 in total, according to press reports citing ZachXBT.
Trezor
Counterfeit Trezor Model T with modified bootloader and preset seeds
HighSupply chainNot applicableAnyone who set up a wallet on such a counterfeit used a seed the attacker already knew. Owners of genuine devices bought through official channels are not affected.
OneKey
OneKey Mini and Touch seed extraction via secure element bus
HighHardware attackFixedAn attacker with an affected device in hand and lab equipment could extract the seed phrase. OneKey states the issue is patched and no users were affected.
2022
Trezor
Trezor's Mailchimp newsletter used to send fake Trezor Suite
HighVendor infrastructure compromiseMitigatedOwners who installed the fake Trezor Suite and entered their recovery phrase gave attackers control of their funds. Subscribers' email addresses and, in some cases, names and IP addresses were exposed, according to Trezor, which invites further targeted phishing.
2021
Ledger
Fake Ledger Nano X devices mailed to data breach victims
HighTargeted phishingNot applicableOwners whose addresses were in the leaked database could receive a convincing counterfeit built to collect their recovery phrase. Anyone who followed the instructions would hand attackers control of their funds.
SafePal
Kraken bypasses SafePal S1 tamper detection and downgrades its firmware
LowHardware attackMitigatedSomeone with physical access could open an S1 without triggering its tamper response and roll back its firmware, but Kraken did not reach keys or funds. SafePal states the findings are not exploitable and patched the downgrade in firmware 1.0.24.
Coinkite
Coldcard registered multisig wallets without checking it was a cosigner
HighFirmware vulnerabilityFixedUsers who registered a multisig wallet on a Coldcard on firmware 3.1.9 or earlier through a compromised computer could end up with a wallet the attacker controls or can hold to ransom. Coinkite disputes that this is a remote attack, since it requires a compromised computer at wallet creation.
2020
Coinkite
Coldcard testnet mode could be used to sign a real bitcoin transaction
HighFirmware vulnerabilityFixedA Coldcard owner on firmware 3.1.9 or earlier persuaded to switch the device to testnet and sign an attacker-supplied transaction could lose real bitcoin. Coinkite considers the attack unrealistic because switching to testnet requires explicit action on the device.
Ledger
Ledger customer database breach
MediumCustomer data breachNot applicableNames, postal addresses, phone numbers and email addresses of Ledger buyers became public, which identifies them as crypto holders. No device or seed compromise was reported, but the data was later used for phishing, including fake devices sent by mail.
Ledger
Ledger Nano X debug interface enabled supply-chain attacks (Kraken)
HighHardware attackFixedA Nano X tampered with before first use could act as a keyboard on the owner's computer or hide transactions from the screen. Ledger states the Secure Element and user secrets were not affected and that firmware 1.2.4-2 fixes the issue.
Ledger
Ledger Bitcoin app SegWit fee overpayment vulnerability
HighFirmware vulnerabilityFixedUsers of the Ledger Bitcoin app and SegWit-capable forks before version 1.4.0 could lose funds to inflated fees if their computer's wallet software was compromised and they signed the same transaction twice. Ledger states the issue is fixed in Bitcoin app 1.4.0.
Trezor
SegWit double-signing flaw could make Trezor users pay a huge fee
HighFirmware vulnerabilityFixedA Trezor user signing on a compromised computer could be led to sign twice and lose most of the transaction's inputs to fees. Trezor lists the issue as fixed in Trezor One 1.9.1 and Model T 2.3.1.
Ledger
Ledger Monero app spend key extraction (CVE-2020-6861)
HighFirmware vulnerabilityFixedMonero holders using Ledger Monero app versions before 1.5.1 with a malicious or compromised Monero client could have their spend key extracted without any sign on the device. Ledger states the issue is fixed in Monero app 1.5.1.
CoolWallet
Kraken finds CoolWallet S app leaked seed, PIN and pairing password
HighSoftware vulnerabilityMitigatedCoolWallet S owners whose phone was stolen or infected could have their seed, PIN and pairing password exposed by the Android app. CoolWallet states the risk was limited and that the logging, screen-capture and bypass issues were fixed in its next app release.
Trezor
Kraken extracts Trezor One and Model T seeds by voltage glitching
HighHardware attackCannot be patchedSomeone holding a Trezor One or Model T without a passphrase could recover its seed with specialised equipment in about 15 minutes. A device protected by a BIP39 passphrase is not exposed, according to both Kraken and Trezor.
2019
Trezor
Ledger Donjon extracts Trezor seeds in minutes with physical access
HighHardware attackCannot be patchedAnyone holding a Trezor One or Model T without a strong passphrase could, according to Ledger, extract its seed in minutes with inexpensive equipment. Trezor states a passphrase fully mitigates the attack and disputes that it was disclosed to the company.
Ellipal
Ledger Donjon dumps encrypted keys from the Ellipal EC01 via debug ports
HighHardware attackMitigatedSomeone with physical access to an EC01 and lab tools could dump its encrypted keys and, if the password was weak, brute-force them, or backdoor the device. Ellipal states that no seeds were extracted and that firmware v2.0 and the Titan redesign address the findings.
Trezor
Trezor One 1.8.0 fixes glitching attacks that read the seed from memory
HighHardware attackFixedAn attacker with physical access to a Trezor One on firmware older than 1.8.0 could read the seed from memory unless a passphrase was set. Trezor fixed them in Trezor One firmware 1.8.0; the Model T was not directly affected and received the same protections in 2.1.0.
2018
Ledger
wallet.fail at 35C3: Ledger Nano S MCU firmware and Ledger Blue PIN side channel
HighHardware attackMitigatedAn attacker with physical access to a Nano S, combined with malware on the owner's computer, or one positioned within close radio range of a Ledger Blue during PIN entry, could undermine the device's protections in lab conditions. Ledger states the findings showed no practical vulnerability and that no seed or PIN was extracted from a stolen device.
Ledger
Ledger Nano S MCU firmware verification bypass
HighFirmware vulnerabilityFixedAn attacker who handled a Nano S on firmware 1.3.1 or earlier, before delivery or after setup, could install firmware that controlled or captured the recovery seed. Devices on firmware 1.4.1 are not affected, according to Ledger.
2017
Trezor
Trezor One firmware left seed in RAM, readable with physical access
HighFirmware vulnerabilityFixedSomeone with physical access to an opened Trezor One running firmware older than 1.5.2 could read its seed and PIN from RAM; passphrase-protected wallets were not exposed, according to the researcher's write-up. Trezor states the issue was fixed in 2017.
What we record and how
Included
We record confirmed vulnerabilities in hardware wallets and their firmware, attacks on their chips, tampered or counterfeit devices, flaws in vendors' own apps, leaks of vendors' customer data, compromised vendor services, and phishing aimed at owners of a specific brand.
Not included
We do not record exchange hacks, general crypto scams, losses caused by owner error, or claims we could not confirm from at least two independent sources.
Each entry cites at least two independent sources and links the vendor's own statement when there is one. Where vendors, researchers and analysts disagree, for example on losses, both figures are given, and the wording follows the sources: “the researchers showed”, “the vendor states”.
Severity
- Critical
- Funds can be stolen remotely, without access to the device and without the owner doing anything unusual.
- High
- Funds can be stolen with physical access to the device, through a tampered device, or once the owner is tricked into revealing the recovery phrase or approving a malicious transaction.
- Medium
- Customers' personal data exposed; funds are not directly at risk.
- Low
- Theoretical attack, or a proof of concept that does not reach the keys or funds.
Incident types
- Firmware vulnerability
- A flaw in the code running on the device itself, including seed and random-number generation, that lets an attacker extract keys, change what the device signs or bypass the PIN.
- Glossary: Firmware, Bootloader, Firmware Update
- Hardware attack
- An attack on the chip or circuit board with the device in hand: fault injection, side-channel analysis, debug ports or memory readout.
- Glossary: Fault Injection, Side-Channel Attack, Secure Element, Evil Maid Attack
- Supply chain
- The device or its software was tampered with before it reached the owner: units modified by resellers, counterfeit devices, compromised software dependencies.
- Glossary: Supply Chain Attack, Tamper-Evident Design
- Software vulnerability
- A flaw in the vendor's companion app, browser extension or library, not in the device firmware.
- Glossary: Malware, Blind Signing
- Customer data breach
- Personal data of the vendor's customers (names, emails, delivery addresses, order details) exposed through the vendor or one of its contractors.
- Glossary: Phishing Attack, $5 Wrench Attack
- Vendor infrastructure compromise
- The vendor's own services were taken over and used against owners: website, DNS, push notifications, newsletters or update servers.
- Glossary: Phishing Attack, Malware
- Targeted phishing
- A campaign aimed at owners of a specific brand: fake apps, look-alike domains, fake support or letters asking for the recovery phrase.
- Glossary: Phishing Attack, Crypto Scam
Open data and feed
The whole tracker is available as open data under the CC BY 4.0 licence, using the values listed above. Please link to the entry you cite.
Cite the tracker
WalletInsights. Hardware wallet security incident tracker. Last checked November 4, 2026. https://walletinsights.io/en/security-incidents/
Corrections and right of reply
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.