In 2026, two vulnerabilities affecting hardware wallets compromised seed phrases: flawed Coldcard firmware and tampered Ledger Nano X and Nano S Plus devices sold by authorized reseller CryptoBilis. Forbes reported that Bitcoin hack losses exceeded $500 million in 2026, while Axis Intelligence estimated hardware wallet losses at approximately $241 million. Attackers stole more than 1,800 BTC, valued at between $100 million and $150 million, in the Coldcard incident, and approximately $90 million to $100 million through compromised Ledger devices. These incidents prompted recommendations for multisignature setups using multiple manufacturers and for adding entropy when generating seed phrases. As of October 15, most funds stolen in the Coldcard breach remained unmoved, and additional tampered Ledger devices may still be discovered.
Source: Read the original article
