Ledger / OCT 2026
Ledger Nano X: physical cellular implant
Physical implants in Nano X devices are the focus of an ongoing investigation. Ledger confirmed an implant in one affected customer’s device on October 10.
Read disclosure ↗The disclosure library
Evidence.
Open to inspection.
28 sourced records across 11 manufacturers. Explore the affected models, attack requirements and published fixes.
This archive includes individual findings, related research chains and grouped audits. Record counts are not a security ranking.
No matching disclosures. Try another manufacturer or search term.
Keystone / 2026-10-04 (article updated)
Black Hat 2026: USB SDK attack
Research demonstrated mnemonic extraction through a USB vulnerability chain.
Read disclosure ↗Ledger / 2026-08-27
Signing state could change during review
Displayed transaction and signed transaction could differ.
Read disclosure ↗Ledger / 2026-08-27
Clear-signing array count truncation
Review could show fewer operations than the signed transaction contains.
Read disclosure ↗Ledger / 2026-08-27
Swap approval accepted as payment
A token approval could satisfy a swap payment check.
Read disclosure ↗BitBox / 2026-08-17
Three security findings in Dixence disclosure
Older bootloader: malicious firmware. Uninitialized Multi: memory corruption. Silent Payments: funds lock.
Read disclosure ↗Trezor / 2026-08-16 (reported)
Authenticity proofs not bound to individual chips
One valid proof could satisfy checks intended for different chips.
Read disclosure ↗Coldcard / JUL 2026
Coldcard: weak seed generation and migration
Coinkite’s incident status describes weakened seed generation and thefts. Corrected firmware changes future generation; it does not strengthen an existing affected seed.
Read disclosure ↗Tangem / 09 JUL 2026
Tangem: laser fault password reset
Ledger Donjon reports an unauthorized password reset using invasive laser fault injection. Tangem acknowledges the scenario but challenges its practical significance.
Read disclosure ↗Trezor / 2026-06-22 (reported)
Pairing-code check bypass
Pairing could complete without knowing the displayed code.
Read disclosure ↗Ledger / 2026-06-04
Monero app secret-key exposure
View and spend keys could be exposed without a new confirmation.
Read disclosure ↗Trezor / 2026-06-03
TROPIC01 laser fault research
Chip firmware verification could be bypassed.
Read disclosure ↗Jade / 2025-12-16
Descriptor parsing memory corruption
Crash; potential secret-key extraction on exploitable versions.
Read disclosure ↗Coldcard / 2025-09-30
Delta PIN private-key recovery
Researcher reported private-key recovery from the Delta PIN signing behavior.
Read disclosure ↗Tangem / 2025-09-17
Access-code retry-delay bypass
Donjon reports faster access-code guesses through a tearing attack.
Read disclosure ↗Tangem / 2025-05-15
Android genuine-check bypass
A counterfeit card could pass the authenticity workflow.
Read disclosure ↗Trezor / 2025-03
Donjon supply-chain evaluation
Some anti-tampering countermeasures could be bypassed.
Read disclosure ↗Tangem / 31 DEC 2024
Tangem: private keys in support logs
Tangem acknowledged a private-key logging issue associated with seed-based wallet activation and subsequent in-app support contact. Seedless activation was outside this issue.
Read disclosure ↗Coldcard / 2023 (presentation)
Donjon full Mk3 extraction chain
A complete seed was recovered from a challenge wallet.
Read disclosure ↗Passport / 2021-06
Pre-production boot and update audit
Audit found boot/update validation and external-storage weaknesses.
Read disclosure ↗SafePal / 2021-02-16
Physical tamper and downgrade weaknesses
Tamper defenses could be bypassed and firmware downgraded.
Read disclosure ↗Coldcard / 2021-02-09
Multisig wallet substitution
Failure to verify the device’s own xpub could substitute attacker-controlled keys.
Read disclosure ↗Coldcard / 2020-05-18
Donjon laser PIN recovery
PIN-protection material could be recovered.
Read disclosure ↗Trezor / 31 JAN 2020
Trezor One and Model T: physical seed extraction
Kraken reported extraction of PIN-encrypted seed material through a microcontroller fault on Trezor One and Model T. Physical access is a prerequisite.
Read disclosure ↗Coldcard / 19 DEC 2019
Coldcard: multisig change validation
Insufficient multisig script validation could allow tampered PSBT files to redirect transaction change. Coinkite credited researcher Dmitry Petukhov.
Read disclosure ↗KeepKey / 2019-12-10
Kraken physical seed extraction
PIN-encrypted seed extraction enabled offline PIN attacks.
Read disclosure ↗Trezor / 2019-08
Black Hat: MINimum Failure
Faults in USB handling could expose device memory.
Read disclosure ↗Ellipal / 25 JUN 2019
Ellipal EC01: physical and firmware weaknesses
Ledger Donjon documented physical-interface and firmware weaknesses in the original ELLIPAL EC01. ELLIPAL later disputed that a seed had actually been extracted.
Read disclosure ↗