hardware

Recently, in response to user information leaks and supply chain security risks in the hardware wallet industry, KeyPal, a hardware wallet brand under TokenPocket, announced further enhancements to user privacy protection and data security management mechanisms.KeyPal stated that it has not found any security breaches in its system or customer data leaks; this adjustment is a proactive preventive measure based on changes in industry risks.According to the latest plan, KeyPal aims to delete or anonymize unnecessary customer personal information within 15 days after order completion for orders that have confirmed receipt, completed fulfillment, and have no after-sales disputes or other legitimate retention requirements. The security of hardware wallets not only involves private key protection and transaction signing but also includes the protection of personal information generated during the purchase, delivery, and after-sales service processes.

Key hardware manufacturer Foundry Robotics founder and CEO Adarsh Kulkarni announced that the company has completed a $100 million Series A funding round, led by Marlinspike VC, with continued participation from Khosla Ventures.Kulkarni stated that the company will build a 130,000 square foot factory in Emeryville, California, to produce critical hardware domestically in the United States. The company has delivered products to paying customers in the energy, telecommunications, autonomous driving, and defense sectors.

The hardware wallet OneKey co-founder Yishi stated that in light of recent data breaches and supply chain attacks in the hardware wallet industry, OneKey will further strengthen user privacy protection.OneKey has confirmed through the Shopify API that relevant historical order records and personal information such as names, emails, and shipping addresses have been deleted, and is further investigating other systems and third-party integration services. In the future, it will ensure that personal information related to orders within its control is permanently deleted within 30 days, and plans to gradually migrate its e-commerce business to self-controlled infrastructure to reduce reliance on third-party platforms like Shopify.Yishi also stated that the data retention policies of logistics service providers such as FedEx and UPS are not controlled by OneKey, and it cannot guarantee that all third parties adhere to the same 30-day timeframe.

NVIDIA (NVDA.O) and Meta will expand the deployment scale of NVIDIA Vera Rubin, Vera CPU, Spectrum-X, and BlueField-4.

Cryptocurrency hardware wallet manufacturer Keystone disclosed that its website experienced a security breach, allowing unauthorized third parties to access customer names, contact information, shipping addresses, and order details. Keystone stated that it has blocked access, fixed the vulnerability, and launched an investigation, while also notifying affected customers, but did not disclose the number of individuals impacted.Security researcher Taylor Monahan warned that the leaked shipping addresses could expose customers to targeted scams and personal attacks. Keystone stated in 2023 that it would shorten the retention period for customer data to 180 days, but some customers reported receiving breach notifications more than two years after purchasing their devices.

Hardware wallet manufacturer Keystone has confirmed that its website suffered a security breach, resulting in the leakage of some customers' address information and order details. The company stated that it took immediate action upon discovering the vulnerability and successfully prevented unauthorized access.Currently, Keystone has completed the vulnerability repair work and emphasized that this incident did not affect users' payment details, mnemonic phrases, or private keys. The company stated that it will continue to strengthen security measures.

Heatbit, which previously launched a heater with a built-in Bitcoin mining machine, has announced the release of a heating element for water heaters named Bitwater. This element replaces the resistance wire in standard electric water heater elements with 20 Bitcoin mining chips, using the heat generated by the chips to directly heat the water in the tank. Heatbit stated that this electricity was originally intended for heating water, "the same heat, the same electricity, plus Bitcoin." The company claims that global households use approximately 300 TWh of electricity annually for heating water, which exceeds the entire Bitcoin network's consumption of about 170 TWh, advocating for the decentralization of mining to households.Bitwater uses 20 Bitmain BM1370 chips, with a maximum hash rate of 34 TH/s, a maximum power consumption of 600 watts, and an energy efficiency of 12 joules/TH. Due to water cooling, this element requires no fans and produces no noise. The installation process is DIY: turn off the circuit breaker, drain the tank, unscrew the old element, and then screw in the Bitwater using the included wrench. It is compatible with the one-inch standard interface of 30 to 80-gallon electric water heaters commonly found in the United States and Canada, including brands such as A. O. Smith, Rheem, Bradford White, Whirlpool, and GE, without the need for plumbing modifications or additional circuits.Users can check water temperature, hash rate, and earnings through an app, and choose to mine individually or join a mining pool, with mined Bitcoin sent to an address controlled by the user. The initial "genesis batch" pre-order price is $899, with subsequent batches priced up to $1,299, and pre-orders are refundable, with plans to ship in the first quarter of 2027. Heatbit claims to have tested the entire winter in four and five-person households in New York and Florida. Based on the current hash price of approximately $36.73/PH/s/day, the full load of 34 TH/s could mine Bitcoin worth about $1.25 per day, totaling approximately $455 annually.

Bitcoin News posted on the X platform that DOOM has been successfully ported to the Trezor hardware wallet and is running on it.

Semiconductor analyst Jukan shares a commentary translated into English by him, authored by a salesperson from a local Chinese sell-side institution. The individual states: In mid to late September, hardware quickly transitioned into a downward wave, with China and South Korea adjusting first, experiencing deeper declines and longer durations, followed by Japan, Taiwan, and the semiconductor ETF SOXX weakening subsequently; there is significant divergence in the market regarding whether AI is entering a mid-cycle collapse, but there is less controversy about the industry still advancing.The individual summarizes the views of interviewed investors: High long-term interest rates in the U.S., capital expenditures beginning to rely on external financing and competing for funds in the market, multi-layered leverage accumulation, and tight funding are the main reasons for this round of decline, with companies like CoreWeave experiencing a noticeable deterioration in financing structure and cost burden. Model invocation prices are decreasing, but capital expenditures and supply chain costs are difficult to reduce quickly, making short-term investment returns hard to realize. ASML and TSMC's guidance this season is strong, but near-term pressures cannot be ruled out; the bullwhip effect and differences in value chain levels may cause volatility to be greater than expected.The individual also mentions that use cases beyond coding are emerging in scenarios such as SaaS and AI drug development, which may gradually alleviate investment return concerns and expand demand. His personal judgment: Before more evidence emerges, the current situation resembles a high-volatility phase rather than a collapse that has already begun; the decline may not yet be over, and hardware leadership may give way to applications. Even if control of both houses changes in the midterm elections, the impact may mainly be limited to constraints on certain data center projects, and the U.S. earnings season needs to verify the performance of large technology companies.

Former Mt. Gox CEO Mark Karpelès questioned Ledger Support's previous statements. Ledger customer service had claimed that the secure element could detect physical tampering, and if additional hardware attempted to intercept signals, it would not pass authenticity verification. Karpelès pointed out that Ledger's own documentation states that if the original secure element is intact, authenticity verification cannot detect unauthorized physical modifications such as spy implants, which directly contradicts the customer service claims.Mark Karpelès stated that reports have shown that over $90 million has been stolen due to such "additional hardware" intercepting signals less than two months later, and that Ledger had published photos of spy implants for multiple models in a March 2026 academic article. Given the known threats, assuring users that authenticity verification can detect such modifications may constitute misleading advertising.

According to Cointelegraph, French hardware wallet manufacturer Ledger received multiple reports of malicious implants months before the latest security crisis occurred. Former Mt. Gox CEO Mark Karpelès stated that at least two individuals contacted Ledger starting in December 2025 to report that their devices had been tampered with, but no public warning was issued.Security researcher Joe Grand reported a malicious implant to Ledger on March 4, 2026, which was located in a Nano X purchased from Lazada in Thailand in August 2025.Ledger confirmed the findings and stated that an internal investigation would be launched, but did not proactively alert customers. Mark Karpelès believes that the increase in the number of reports and the complexity of the technology used should prompt Ledger to take action and at least remind customers to remain cautious.Ledger declined to comment on how they handled Joe Grand's disclosure, only directing to their public statement on X. The Ledger security crisis was made public on October 9, involving the loss of wallet crypto assets sold by Southeast Asian authorized dealer CryptoBilis; Ledger confirmed that one affected device contained an unauthorized implant. Trezor had also previously received reports involving unauthorized sellers tampering with devices.

Ledger released a report on the investigation of hardware implant attacks, stating that a highly organized criminal gang purchased genuine Ledger devices over several months, disassembled them, and implanted custom hidden components to steal users' recovery phrases when initializing the devices. They then resold the devices through Southeast Asian distributor channels.The attackers invested millions of dollars to build infrastructure for collecting recovery phrases, asset transfers, and money laundering, coordinating actions to transfer victims' assets. Ledger emphasized that this incident was not caused by vulnerabilities in the chip, operating system, or servers, but rather a localized distribution channel attack that occurred after the devices left the company's control. Currently, Ledger has requested authorized distributors and resellers in Southeast Asia and Hong Kong to suspend sales and conduct random checks on inventory and retail channel devices, finding no other tampered devices.Additionally, Ledger has requested authorized distributors not to resell any returned devices, even if the packaging is intact; they have also immediately prohibited displaying products on shelves or in display areas, requiring devices to be stored at the back of the store and delivered upon purchase. The company is working with law enforcement and the security community to track the stolen funds and will disclose more technical details in the future.

According to PR Newswire, Solana Mobile, the mobile business of the Solana ecosystem, announced at the Ledger Op3n 2026 event in Paris that the hardware wallet company Ledger has become its first hardware expansion partner. The Solana dApp Store and wallet will merge into the Seeker app and integrate with the new device Ledger Atom, which will be pre-installed on the device's home screen for users to access the Solana ecosystem. Pre-orders for Ledger Atom are now open.Ledger Atom is based on the Android open-source project and features a secure element running Ledger OS, with a protection level of EAL6+, displaying and touch control physically isolated from the Android system. Signing and approval are completed in secure mode, and the device includes tamper-proof and tamper-evident solutions, sold exclusively through the Ledger official website. The built-in app store currently has over 1,500 applications covering categories such as trading, payments, gaming, and AI. Existing Seeker users are unaffected, and developers can reach more devices with a single submission.This collaboration builds on Solana Mobile's opening of the Solana Mobile Stack to Android manufacturers at the World Mobile Communications Conference in March 2026. The SKR token is used to reward user participation, developer building, and hardware vendor integration. Seeker has a transaction volume exceeding $13 billion, with 154 million transactions and over 200,000 devices sold; the company shipped Saga in 2023 and will ship Seeker in 2025.

Ledger announced the progress of the investigation into the hardware wallet implantation attack. According to its disclosure, an organized crime group spent months purchasing genuine Ledger devices, disassembling them to implant custom hardware specifically designed to steal mnemonic phrases, and then reintroducing them to the market through Southeast Asian distribution channels.The group also established a supporting system for collecting mnemonic phrases, asset theft, and money laundering, with Ledger stating that the scale of their investment reached several million dollars. Ledger emphasized that this incident is a localized distribution channel attack, and its chips, operating system, and servers were not compromised.The company has requested authorized distributors and resellers in Southeast Asia and Hong Kong to suspend sales and implement new security regulations, including prohibiting the display of devices on shelves or in display areas, as well as banning the resale of returned devices.

The founder of the hardware wallet OneKey, Yishi, announced the launch of a tool to detect whether hardware wallets have been tampered with, called tampered.app. Users can upload photos of the circuit board for detection, supporting OneKey, Ledger, and Trezor, free of charge, without registration, and without saving photos.The tool can mark suspected anomalies, but a normal result does not guarantee complete safety. Yishi stated that tests on approximately 400 photos submitted by users showed an accuracy rate of over 95%.

Binance founder Zhao Changpeng posted on X stating: In the future, all hardware wallets must adopt transparent cases.

The Synthetic Dollar Agreement's founder and CEO of Ethena, Guy Young, stated that users have noticed a large investor wallet transferring tokens in the past 48 hours. He confirmed that the related transfers are a security precaution related to recent concerns about hardware wallets and do not indicate that the tokens are being sold after being transferred.Guy Young made the above statement on X in response to the community's concerns about the on-chain movements of large wallets. He emphasized that the related operations are precautionary arrangements taken for security reasons and do not represent that investors are selling their held tokens.

According to Bitcoin News monitoring, Bitcoin News released a podcast where former Mt. Gox CEO Mark Karpelès discussed the largest supply chain attack in the history of the cryptocurrency industry with Foundation CEO Zach Herbert.Mark Karpelès stated that he discovered a spy implant three weeks before the funds were stolen and contacted Ledger, but received no response. The implant was equipped with a hidden cellular modem that could directly read the mnemonic phrases displayed on the screen and bypass Ledger's own checks; even setting a passphrase would not prevent the mnemonic phrases from being stolen.Mark Karpelès mentioned that if he had $5 million, he could create an implant that would only be detectable through X-rays. The show also discussed the hardware wallet dealer model, the Malaysian dealer behind the attack, on-chain tracking of stolen crypto assets, the spread of the attack to Europe, reasons why Trezor was not targeted, hardware wallet security, and multi-party computation solutions. The show timeline indicated that the amount stolen from hardware wallets reached $100 million, with $86 million transferred out within 24 hours.

According to an official post from Ledger, its security team Ledger Donjon is investigating Ledger signing devices sold by the Southeast Asian distributor CryptoBilis, which have been implanted with unauthorized hardware components. Ledger confirmed this matter on October 10 regarding a device belonging to an affected user. Donjon's analysis shows that the implant is located within the device's casing and can read the screen display content—decoding the 24-word recovery mnemonic during the initial setup and transmitting it externally via LTE through a built-in eSIM; this component does not alter the security chip, system, or transaction signature.Currently, all confirmed financial losses related to the incident disclosed on October 9 involve devices sold by CryptoBilis. CryptoBilis has stopped selling Ledger devices. The total number of affected users and the amount of losses have not yet been verified, and Ledger is investigating similar implant reports from other distributors and regions.

According to X user @0xJohannes, a Ledger hardware wallet purchased from an official dealer in Europe a few weeks ago was found to contain an unauthorized spy implant. The device has suspicious circuitry inside that genuine Ledger hardware does not possess, indicating it may have been physically tampered with before sale.The implant is suspected to be an older version, as newer versions typically hide components behind the screen. Funds in the affected devices have not yet been stolen. Currently, there are suspected case reports in Asia, South America, and Europe. If the original security components remain intact, Ledger's software Genuine Check cannot detect unauthorized physical modifications.