Ledger bears primary responsibility for supply chain tampering occurring within authorized reseller networks

Overview Debates Related claims Topics Sources

Elon Musk pledged to eliminate Chinese tool manufacturers from supply chains in favor of South Korean tool makers

Cc9f267dcClaimNews event

Electrum maintainers released version 4.8.3 to add signature checks for wallet-owned unconfirmed transactions

Cc9f267dcNews eventClaim

An Electrum user operating a two-of-three multisignature Trezor setup submitted an incident report after noticing a substituted outgoing transaction in local history

Attackers running malicious Electrum servers generated lookalike receiving addresses matching the final four characters of legitimate payment destinations to deceive users checking transaction histories

An Electrum user named Raju-K12 reported on October 18, 2026 losing funds after increasing the transaction fee on a zero-fee transaction substituted by a malicious Electrum server

In one documented attack against user dannydeezy, a rogue Electrum server's substituted transaction matched dannydeezy's original transaction's inputs and locktime while directing funds to a fake destination ending in GyQ3

Electrum version 4.8.3 checks signatures only on wallet-owned inputs, leaving unconfirmed incoming transactions unchecked because the client lacks a full script interpreter

Keystone Hardware Wallet stated that payment card details, bank details, and wallet passwords were not compromised during the October 20, 2026 website breach

Keystone Hardware Wallet confirmed that sensitive cryptographic credentials, including seed recovery phrases and private keys, remained unexposed during the October 20, 2026 unauthorized access to its website

Hardware wallet maker Ledger confirmed in October 2026 that criminals had modified genuine hardware devices to steal recovery phrases before reselling them through Southeast Asian distributors

Keystone Hardware Wallet urged customers to avoid clicking unexpected links and never enter recovery phrases or private keys into devices or online platforms

Single-signature Coldcard Bitcoin wallets that utilized single-word or short numerical passphrases were compromised during the July 29, 2026 Coldcard exploit

Coldcard hardware wallets feature transparent casings to enable visual inspection for internal physical tampering

Running Bitcoin Core on an air-gapped laptop paired with a watch-only wallet provides self-custody isolation from hardware supply chain implants

Entering a passphrase or using dice rolls to generate keys on a compromised Ledger does not prevent theft because an unauthorized hardware implant intercepts all screen and button data

Compromised Ledger devices were distributed through third-party resellers in the West Pacific region, including Crypto Billis and Yahoo Auctions Japan

Michael Flaxman published the Bitcoin 10X Security Guide detailing multi-vendor and multi-entropy custody architectures

Single-signature Coldcard Bitcoin wallets protected by user-generated passphrases were not compromised in the July 29 Coldcard firmware exploit

Coldcard experienced a security failure caused by a firmware bug in its software entropy generation

BitKey wallet firmware incorporates chi-squared statistical unit tests to verify the randomness of its internal entropy generation