Ledger has urged CryptoBilis buyers not to initialize unused devices and to move funds from used ones to a wallet with a new recovery phrase. Researchers estimate losses could reach $93.2 million, but the total and the tampering’s origin remain unconfirmed.
Read Full Article
A headline says Trezor removed CryptoBilis from its reseller list while a device was under review, but no dated record or company statement verifies the removal—or links it to the review. Here’s what’s known, what’s missing and what buyers can check.
Read Full Article
A holder reportedly lost 80 BTC after transferring it to a Ledger bought from reseller CryptoBilis. But with no forensic findings or independent confirmation, the device’s role—and the cause of the loss—remain unproven.
Read Full Article
Coldcard has fixed the firmware bug that could generate weak Bitcoin seed phrases, but anyone who created a wallet on the affected versions still needs to migrate funds to a fresh seed. The patch helps future wallets; it does not save compromised ones.
Read Full Article
BitBox has patched two severe hardware-wallet bugs that could have let a malicious host install firmware or send Silent Payments to the wrong Bitcoin address. No exploitation has been reported, but it’s a sharp reminder that self-custody depends on code, not vibes.
Read Full Article
A Coldcard firmware flaw reportedly weakened seed generation on some Bitcoin hardware wallets, helping fuel a massive drain that investigators say may have hit thousands of addresses and drained well over $100 million. Firmware updates won’t fix old seeds — users may need to move funds fast.
Read Full Article
A five-year-old Coldcard build bug quietly weakened seed generation and helped trigger one of the biggest hardware wallet thefts in crypto history. The fix stops future damage, but old seeds made on the broken firmware are still a loaded gun.
Read Full Article
A Coldcard firmware bug didn’t break Bitcoin — it broke seed generation. Weak fallback randomness left some offline wallets vulnerable, and once the seed is compromised, no firmware update can undo the damage.
Read Full Article
USB wallet malware is a hard reminder that cold storage is only as safe as the hardware’s supply chain. Hardware wallets still beat exchanges, but tampered devices, fake products, and sloppy seed-phrase handling can turn self-custody into a costly trap.
Read Full Article
Microsoft is warning Windows crypto users about CryptoBandits, a clipboard-hijacking malware that swaps copied wallet addresses and may target seed phrases too. One bad paste can mean a permanent loss — because in crypto, the clipboard is not your friend.
Read Full Article