Technology
NewsOnScale Staff
October 14, 2026
Hardware wallets — also called cold wallets — were considered the gold standard of cryptocurrency security. Your private keys stored offline, on a physical device, unreachable by hackers who can't touch what isn't connected to the internet.
That assumption is being dismantled in 2026.
The Ledger Supply Chain Attack — $70 Million
On October 9, Ledger SAS confirmed it was investigating reports of a $70 million attack affecting users who purchased wallets from CryptoBilis, a Malaysian reseller. On October 10, Ledger confirmed that at least one affected device contained an unauthorized physical hardware implant — meaning someone physically modified the device before it reached the buyer.
CryptoBilis has ceased all hardware wallet sales pending the investigation. Ledger stated that no reports have been made regarding products purchased directly from Ledger itself — the compromise happened in the supply chain, between manufacturer and buyer.
The Counterfeit Ledger Operation — $9.5 Million
A Brazilian cybersecurity researcher documented a large-scale operation selling counterfeit Ledger Nano S Plus devices across multiple online marketplaces. The fake devices were visually identical to genuine Ledgers but contained completely different hardware — including WiFi and Bluetooth antennas not present in the real product.
Any wallet initialized on a counterfeit device was drained immediately. The operation confirmed financial losses exceeding $9.5 million across more than 50 documented victims. The attack spanned five vectors: compromised hardware, Android apps, Windows executables, macOS installers, and iOS apps distributed through TestFlight to bypass App Store review.
The Coldcard Firmware Exploit — Up to $130 Million
A firmware vulnerability in Coldcard hardware wallets dating to a March 2021 build is being actively exploited. The flaw caused wallet seeds to be generated from a software fallback rather than the device's hardware random number generator, leaving private keys guessable. Losses across four waves of attacks could reach $130 million. Trezor and Foundation are warning of a surge in related phishing attacks targeting hardware wallet owners.
The TikTok Scam — $6.9 Million
One victim purchased what appeared to be a sealed, legitimate hardware wallet promoted through TikTok. They deposited 50 million Chinese yuan — approximately $6.9 million — into what they believed was secure cold storage. The wallet had been pre-compromised before sale. The funds were drained.
What this means for crypto holders
The combined documented losses from hardware wallet attacks in 2026 exceed $200 million. The attack surface has shifted from software hacks to physical supply chain fraud. A device that looks sealed and genuine may contain unauthorized hardware. A firmware vulnerability from 2021 may still be exploitable today.
The rules for hardware wallet security have changed:
Only purchase directly from the manufacturer's official website. Never buy from Amazon, eBay, TikTok, or any third-party reseller. Verify packaging integrity and firmware version on first use. Never use a second-hand hardware wallet regardless of who sold it.
Cold storage is still safer than leaving crypto on an exchange. But the assumption that a sealed hardware wallet is automatically safe no longer holds.
NewsOnScale is owned by AMILLI AI, Corp., founded by JJ Johnson.