Wallet Security News

Type

Vulnerability

Severity

High

Status

Mitigated

Coinkite disclosed a security advisory affecting seed generation on COLDCARD hardware wallets (Mk2, Mk3, Mk4, Mk5 and Q). Affected firmware generates seeds with reduced entropy: Mk2/Mk3 firmware versions 4.0.1 through 4.1.9 inclusive, and Mk4, Mk5 and Q before their fixed releases, produce roughly 72 bits of entropy instead of the expected 128 bits. Funds controlled by such seeds are at risk. Fixed firmware has been released for all affected models. Coinkite advises migrating to a newly-generated seed.

Type

Incident

Severity

Low

Status

Resolved

Consensys, creator of MetaMask, accidentally hired a North Korean-linked developer using the alias "Tyler Knapp" who worked as a consultant on core MetaMask platform code, including crypto-to-fiat conversion functionality. The actor contributed to MetaMask's mobile wallet for roughly a month (from March to April 2026) before access was terminated. Consensys's investigation confirmed that there was no misappropriation of assets or data, no malicious code deployed, and no impact to user safety and security.

Type

Vulnerability

Severity

Low

Status

Ongoing

Laser fault injection found by Ledger's Donjon security team on the TROPIC01 secure element, used by Trezor Safe 7 devices. This does not amount to a full compromise of Trezor devices.

Type

Hack

Severity

High

Status

Ongoing

BankrBot reported that several users had their wallets compromised and drained. The root cause and full scope of the breach have not yet been disclosed. Transactions have been disabled as a precautionary measure while the team investigates.

Type

Data Breach

Severity

Medium

Status

Resolved

Global-e, an independent e-commerce platform used by Ledger.com, experienced unauthorized access to their cloud systems. Personal data including names and contact information of Ledger customers who made purchases through Global-e were improperly accessed. No payment information, account credentials, or passwords were compromised.

Type

Hack

Severity

Critical

Status

Mitigated

A malicious version of Trust Wallet Browser Extension (v2.68) was published to the Chrome Web Store on December 24, 2025, through a compromised API key. The attack, linked to the industry-wide Sha1-Hulud supply chain incident, affected users who logged in during December 24-26, 2025. Approximately 2,520 wallet addresses were impacted with $8.5M in losses. Trust Wallet has committed to reimbursing all affected users.

Type

Data Breach

Severity

Critical

Status

Mitigated

Slope Wallet versions 2022-06-24 and later contained user tracking code that leaked users' full seed phrase to the Slope's on-premise Sentry analytics platform.