Security· ★★★★· bearish·

Chain INK logs 10 hardware wallet incidents in 2026, losses near $200M

  • —Coldcard firmware flaw on July 30 drained up to $111M from over 5,200 wallets
  • —Ledger: $87M stolen from 98 wallets bought via CryptoBilis; reseller sales halted
  • —Trezor and SafePal exposed data of more than 120,000 customers via vendors in August
  • —Ledger Donjon bypassed Tangem and Trezor Safe 7 protections with a laser; no thefts reported
Why it matters: Repeated supply-chain and firmware attacks undermine confidence in self-custody and strengthen the case for regulated custodial alternatives.
Source: Cryptoast