Every recorded Cypherock security incident, newest first, with severity, fix status and sources.
An X1 tampered with before it reaches the buyer could pass Cypherock's authenticity check and generate recovery phrases known to the attacker, according to DARKNAVY. Cypherock has not published a statement on the demonstration.
Cypherock X1 owners on firmware older than v0.6.1024 who connected and used the wallet on a computer running malware could have had their keys or passphrase read out over USB, according to the researcher. Cypherock has not published a statement on the disclosure.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 4, 2026. https://walletinsights.io/en/security-incidents/cypherock/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.