Tracker
Wallet and exchange security watch
COLDCARD Mk4 / Mk5 / Q
Advanced only- Verdict
- Advanced users only, new seeds only
- Minimum firmware
- Current 5.6.3 / 1.5.3Q (fix first shipped in 5.6.0 / 1.5.0Q)
- Last checked
- A firmware RNG integration error produced weak seeds; affected seeds were brute-forced offline and thefts began July 30, 2026. The devices were not remotely hacked.
- Galaxy Research (Aug 14, 2026): 1,778.84 BTC high-confidence losses from 8,600+ addresses. Galaxy's Aug 25, 2026 update: about 1,789 BTC from 8,865 addresses, roughly 87% unmoved.
- Updating firmware does not repair an existing seed. Make a new seed on fixed firmware and move funds.
- Oct 11, 2026: an unauthorized phishing post appeared on COLDCARD's official X account and was deleted. The only official site is coldcard.com.
- Mk2/Mk3: final firmware 4.2.0; not recommended for new use.
Coinkite advisoryCOLDCARD security statusCOLDCARD migrationCOLDCARD downloadsGalaxy Research (Aug 14, 2026)Cointelegraph (Aug 25, 2026)BlockSec analysisCointelegraph: X phishing post (Oct 11, 2026)
Ledger (current models)
Caution- Verdict
- Acceptable for multi-asset users; buy only from ledger.com; leave Ledger Recover off
- Minimum firmware
- Latest firmware
- Last checked
- Oct 2026: criminals fitted cellular implants into genuine Ledger devices sold through unauthorized Southeast Asian channels to capture seeds during setup. Ledger says the secure element, OS and servers were not compromised.
- Oct 15, 2026: Ledger asked sellers across Asia, including Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong, to halt sales during the investigation.
- Oct 13, 2026: MediaMarkt pulled Ledger devices in Germany as a precaution.
- Anyone who set up a device bought through an affected channel should move funds to a new device and a new seed.
Ledger responseBleepingComputer: Asia sales haltBleepingComputer: implant confirmedCoinDesk (Oct 13, 2026)Cointelegraph: MediaMarkt
Trezor Safe 3 / Safe 5 / Safe 7
Recommended- Verdict
- Recommended, PIN always set
- Minimum firmware
- 2.12.5+
- Last checked
- Several 2025–26 issues (a BIP-39 side channel on unlocked devices, a multisig verification bug, an SD-protect lock bypass) are resolved in current firmware per Trezor's disclosures and changelog.
- Model One is not recommended for new buyers.
Trezor firmware changelogTrezor: multisig verification bugTrezor: lock bypassENISA EUVD-2026-46400
BitBox02 / BitBox02 Nova
Recommended- Verdict
- Recommended (Bitcoin-only edition preferred)
- Minimum firmware
- 9.26.5+
- Last checked
- 9.26.5 fixed a bootloader issue, a memory-corruption issue on unconfigured Multi editions, and a Silent Payments flaw. BitBox reports no exploitation.
Blockstream Jade / Jade Plus
Recommended- Verdict
- Recommended
- Minimum firmware
- 1.0.41 (1.0.38 absolute minimum)
- Last checked
- A 2025 stack overflow was fixed in 1.0.37 with anti-rollback in 1.0.38.
- Blockstream states Jade is not affected by the COLDCARD RNG issue.
Blockstream: Jade security disclosureBlockstream: Jade unaffectedJade changelog
Sparrow Wallet
Recommended- Verdict
- Recommended desktop coordinator
- Minimum firmware
- 2.5.5+
- Last checked
- 2.5.4 and 2.5.5 shipped review-driven hardening fixes. Verify the signed manifest before installing.
BTCPay Server
Caution- Verdict
- Recommended for merchants on current version
- Minimum firmware
- 2.4.4+
- Last checked
- Versions before 2.4.2 let unauthenticated attackers fetch LND macaroons; this was exploited. On-chain wallets were not affected.
- Do not expose the LND API. If you ran LND before 2.4.2, rotate macaroons.
Exchanges
Breaches, hacks and withdrawal freezes at the providers on our buy page. Primary sources only.
Coinbase: Customer data breach via bribed support contractors.
Coinbase disclosed that criminals had bribed overseas support contractors to copy customer data, including names, addresses, contact details, the last four digits of Social Security numbers, masked bank details, government ID images and balances. Coinbase said no passwords, private keys or funds were exposed, refused a $20 million ransom demand and said it would reimburse customers tricked into sending funds. Expect convincing impersonation calls, and never move funds because someone “from support” asks you to.
Last checked Oct 15, 2026
Updating firmware never repairs a seed made on flawed firmware. When in doubt, make a new seed on a fixed device and move funds. See choosing a hardware wallet.