The Bitcoin Red Team discovered and disclosed security vulnerabilities to the Linux kernel maintainers

Overview Debates Related claims Topics

Cryptographer Paul Miller released software patches addressing code vulnerabilities identified using the Kimmy K3 artificial intelligence model

Hardware hacker Joe Grand verified that a Ledger Nano X purchased in Thailand contained unauthorized wiring and an added circuit board

On October 9, 2026, cryptocurrency wallets associated with compromised Ledger devices began being drained of funds

In June 2026, a security researcher in Japan observed at least 90 compromised Ledger devices exfiltrating seed phrases remotely

Single-signature Coldcard Bitcoin wallets that utilized single-word or short numerical passphrases were compromised during the July 29, 2026 Coldcard exploit

OpenSats established a dedicated Red Team fund to support open-source cybersecurity research

The 2026 Ledger security failure was caused by a physical supply chain interception rather than a cryptographic entropy defect

On October 10, 2026, Ledger confirmed the presence of unauthorized physical implants inside affected customer devices

Entering a passphrase or using dice rolls to generate keys on a compromised Ledger does not prevent theft because an unauthorized hardware implant intercepts all screen and button data

The Bitcoin Red Team spent between $20,000 and $25,000 running AI security scans specifically on the libsecp256k1 cryptographic library

The initial attacker in the Coldcard hardware wallet firmware exploit stole over 100 million dollars worth of Bitcoin

Compromised Ledger devices passed official software genuine checks because the factory secure element remained unaltered

AI security scans of the libsecp256k1 cryptographic library identified no critical vulnerabilities

Michael Flaxman published the Bitcoin 10X Security Guide detailing multi-vendor and multi-entropy custody architectures

The compromised Ledger Nano X analyzed by Joe Grand used a smaller battery to create physical space for a spy implant

An unauthorized hardware implant found in compromised Ledger devices was positioned within the foam padding beneath the device screen

Single-signature Coldcard Bitcoin wallets protected by user-generated passphrases were not compromised in the July 29 Coldcard firmware exploit

The Coldcard hardware wallet firmware exploit occurred overnight on July 29, 2026

An unauthorized hardware implant found in compromised Ledger devices contained an eSIM, a microcontroller, and an LTE modem

The Bitcoin Red Team reviewed approximately 650 software codebases across the Bitcoin and broader computing ecosystem