COLDCARD's official X account posted a phishing link to a fake wallet migration site before being deleted. Despite secure credentials and offline 2FA, the company suspects platform-level X compromise rather than direct account takeover, and has requested X's security investigation.
Ledger is investigating reports of user funds being drained from hardware wallets purchased through reseller CryptoBilis in Southeast Asia over the last 90 days, with blockchain investigator Specter estimating over $86 million lost. The company advised affected customers not to set up their devices and to move assets to new Ledger signers, while confirming that Ledger's own infrastructure and systems were not compromised.
Multiple cryptocurrency hardware wallet security breaches emerged on October 9, 2026, with Ledger suffering an $86 million theft through reseller CryptoBillis in Southeast Asia, following earlier hacks of Coldcard, Trezor, and SafePal. The incidents highlighted vulnerabilities in popular Bitcoin storage solutions and raised concerns about USDT's centralized control mechanisms, with industry figures advocating for decentralized alternatives like Bitcoin.