A hardware wallet is a small dedicated device that creates and stores the private keys to your crypto and signs transactions inside itself, so the keys never touch your internet-connected computer or phone. Your coins stay on the blockchain. The device holds the keys that let you move them. That removes the most common way people get robbed, which is malware on a general-purpose computer. Two incidents in 2026 showed what it does not remove: a flaw in how a device generated seeds, and devices tampered with before they reached buyers.
What changed in 2026
October 2026: tampered devices sold through a reseller. On 9 October Ledger said it was investigating losses among users who had bought devices from CryptoBilis, a Southeast Asian reseller. On 13 October Ledger's Donjon security team confirmed the units contained an implant. According to The Block's report of Ledger's statements, the implant captures the 24-word recovery phrase during setup and sends it out over LTE using a provisioned eSIM. It does not modify the secure element or the device's operating system. On-chain researchers estimated losses at more than $86 million. Ledger said the total and the number of affected users are unverified. In a post dated 15 October, Ledger said a criminal group bought genuine devices, opened them, fitted hidden components, and put them back into distribution through resellers in Southeast Asia, with "no flaw in Ledger's chip, operating system or servers." Ledger asked authorised resellers to suspend sales in Southeast Asia and Hong Kong. MediaMarkt Saturn stopped selling Ledger devices in Europe on 13 October after a German customer reported an implant. No loss of funds was reported in that case.
July–September 2026: weak seeds from a firmware bug. On 30 July 2026, Coinkite published an advisory saying some COLDCARD firmware had generated seeds with too little randomness. On Mk2/Mk3, versions 4.0.1 (March 2021) through 4.1.9 are affected. Mk4, Mk5 and Q seeds created before the fixed releases have about 72 bits of entropy instead of the expected 128. Coinkite attributes the cause to a build-integration error that used a software pseudo-random generator instead of the hardware random number generator. The fixed versions are 4.2.0 (Mk2/Mk3), 5.6.0 (Mk4/Mk5), 1.5.0Q (Q), and 6.6.0X / 6.6.0QX on the Edge tracks. Later releases (5.6.1 / 1.5.1Q in August, 5.6.2 / 1.5.2Q in September) require user-supplied entropy and add ways to verify it. TRM Labs, citing Galaxy Research, put preliminary losses at about 1,816 BTC (roughly $116 million) from more than 5,200 addresses as of 5 August.
The lesson from both: updating firmware does not repair a seed that was already weak or already seen. In both cases the advice was the same. Generate a new seed on a clean, updated device and move the funds.
How a hardware wallet works
Keys, not coins
A blockchain records which addresses control which funds. Spending from an address requires a signature made with its private key. Whoever holds the key can spend the funds. A hardware wallet's job is to keep that key on a device that does nothing except protect it and sign.
The signing flow
- You build a transaction in a companion app on your computer or phone.
- The unsigned transaction goes to the device over USB, Bluetooth, NFC, or, on air-gapped devices, QR codes or a memory card.
- The device shows the details (address, amount, fee) on its own screen. You approve with its buttons.
- The device signs internally and returns only the signature.
- The app broadcasts the signed transaction to the network.
For Bitcoin, the Partially Signed Bitcoin Transaction format (BIP-174) was written so that "offline signers such as air-gapped wallets and hardware wallets" can sign "without needing direct access to the UTXO set and without risk of being defrauded."
Step 3 is where the security actually comes from. Malware on your computer can change what the app shows you. It cannot change what the device's screen shows. In the December 2023 Ledger Connect Kit incident, an attacker phished a former employee, published malicious versions of a JavaScript library, and tricked users into signing approvals and fake claim transactions. Ledger's report said users who lost funds had used blind signing, meaning they approved data the device could not display in readable form. Ledger said it would push "Clear Signing" and remove blind signing as an option.
The chip
Many devices store keys in a secure element. GlobalPlatform, the industry standards body, describes this as a tamper-resistant hardware platform, usually a single secure microcontroller, of the kind used in SIM cards, passports and ID cards. Other designs use a general-purpose microcontroller and rely on firmware and open-source code review. The 2026 implant case shows the limit of both approaches. A protected chip does not help if a hidden component reads the recovery words off the screen during setup.
The recovery phrase
Most devices back up the keys as a mnemonic defined in BIP-39. That standard allows 12, 15, 18, 21 or 24 words, drawn from a 2,048-word list. The words plus an optional passphrase are run through PBKDF2 with 2,048 iterations to produce the wallet seed. BIP-32 defines hierarchical deterministic wallets "that can be interchanged between different clients." That is why a phrase written down from one device can usually be restored on another compatible wallet if the manufacturer disappears. Anyone who has the phrase has the funds, and doesn't need the device.
Setting one up safely
- Buy from the manufacturer or an authorised reseller, and check the reseller is listed on the maker's own site. The 2026 implant devices came through a reseller.
- Check the packaging and the device's first boot. Ledger says a genuine device never comes with a recovery phrase or PIN already set. A phrase printed on a card in the box is a scam. Don't use it, don't use the device, and don't send funds to it.
- Install firmware and the companion app only from the manufacturer's official site, and update before you generate a seed. The COLDCARD advisory says to install the fixed firmware first.
- Set a PIN on the device.
- Write the recovery phrase by hand on paper or metal, in order. Never photograph it, type it, store it in the cloud, or enter it into a website. No legitimate company will ask for it.
- Confirm the backup when the device asks you to re-enter words.
- Consider a BIP-39 passphrase. In the COLDCARD case, Coinkite said a strong, unique passphrase meant an attacker would also have to guess it. Short or reused passphrases did not count. The trade-off: lose the passphrase and you lose the funds.
- Verify a receive address on the device screen, send a small test amount, then move the rest.
Is your hardware wallet seed in doubt?
Answer a few questions about your device and recovery phrase to see which steps from this article apply to you.
Have funds already gone missing from a wallet on this device?
When you first opened it, did the box include a recovery phrase, or was a PIN already set?
- Yes → Do not use this device
- No → next question
Was your seed generated on COLDCARD firmware older than the fixed releases (4.2.0 on Mk2/Mk3, 5.6.0 on Mk4/Mk5, 1.5.0Q on Q)?
- Yes → Treat the seed as compromised and migrate
- Not sure which firmware created it → Treat the seed as compromised and migrate
- No, or not a COLDCARD → next question
Has your recovery phrase ever been photographed, typed, stored in the cloud or entered into a website?
Did you buy the device from the manufacturer, or from a reseller listed on the maker's own site?
- Yes → next question
- No, or I can't confirm it → Check where the device came from
When you approve a transaction, does the device's own screen show the address, amount and fee in readable form?
- Yes → No known 2026 issue applies on these answers
- No, I approve data it can't display → Stop blind signing
Ledger's guidance for tampered devices, as reported by The Block, is to contact law enforcement before opening the device. Then generate a new seed on a different clean, updated device and move any remaining funds.
A genuine device never comes with a recovery phrase or PIN already set. Don't use the phrase, don't use the device, and don't send funds to it.
Updating firmware does not repair a seed that was already weak or already seen. Confirm the device runs fixed, official firmware, generate a new seed, record and verify the new backup, verify a receive address on the device screen, send a small test transaction, then the remaining funds. Keep the old backup until the move is complete.
The 2026 implant devices came through a reseller and captured the recovery phrase during setup. Check that the seller is listed on the maker's own site. If you can't confirm it, consider generating a new seed on a device bought from the manufacturer or an authorised reseller and moving the funds.
If the screen can't show what you are approving, the device can't protect you. Users who lost funds in the 2023 Connect Kit incident had used blind signing. Approve only what the device displays in readable form.
Keep the phrase offline on paper or metal, verify every address on the device screen, and consider a strong, unique passphrase or a multisig setup that combines independently designed devices.
This sorts your answers against the 2026 incidents and setup steps in this article only; it cannot inspect your device for implants or tell you whether a seed was actually seen.
If your device or seed is in doubt
Follow the migration steps Coinkite published in 2026. They apply to any compromised seed:
- Confirm the device runs fixed, official firmware.
- Generate a new seed on that device, or on a different clean device.
- Record and verify the new backup before sending anything to it.
- Verify a receive address on the device screen.
- Send a small test transaction, then the remaining funds.
- Keep the old backup until the move is complete.
If you lost funds to a tampered device, Ledger's guidance, as reported by The Block, is to contact law enforcement before opening the device.
Hardware, software and custodial wallets
| Hardware wallet | Software wallet | Custodial account | |
|---|---|---|---|
| Who holds the keys | You, on a dedicated device | You, on a phone or computer | The provider |
| Main risk | Seed exposure, supply-chain tampering, firmware flaws | Malware and phishing on the same device that holds the keys | Provider failure, account takeover, frozen withdrawals |
| Recovery | Your recovery phrase | Your recovery phrase | The provider's account recovery |
| Approving a payment | Physical confirmation on the device | In the app | In the account |
The risk is shifting. Chainalysis reported on 18 December 2025 that more than $3.4 billion was stolen in crypto hacks from January to early December 2025. It counted 158,000 personal-wallet compromises affecting at least 80,000 unique victims, with $713 million taken from individuals, down from $1.5 billion in 2024. Self-custody moves the target from a provider to you.
When a hardware wallet is not enough
- Your backup is the weak point. A stolen or photographed phrase gets around every chip.
- Blind signing defeats the device's purpose. If the screen can't show what you are approving, the device can't protect you.
- Single points of failure. TRM Labs, writing after the COLDCARD flaw, suggested multisig setups that combine independently designed devices and entropy sources, so that one vendor's bug does not empty the wallet.
Limitations: loss figures for both 2026 incidents are preliminary third-party estimates, and Ledger has not published verified totals.
