A Decrypt explainer on hardware wallets highlighted two major security incidents: a Coldcard firmware bug in July 2026 led to approximately 1,816 BTC (around $116 million) being drained, and an October 2026 Ledger disclosure revealed an unauthorized chip implanted in devices sold by a Southeast Asian reseller, resulting in about $86 million in stolen funds. Following the Ledger incident, Ledger halted distribution via resellers in seven Asian markets, and rival manufacturer Trezor also wound up its reseller program as a precautionary measure.