# Hardware Wallet · Drain Watch

3 incidents, 2 live. JSON: https://drains.watch/t/hardware-wallet.json · RSS: https://drains.watch/t/hardware-wallet/feed.xml

- [COLDCARD's X account posts fake 'security migration' phishing link](https://drains.watch/i/coldcard-x-account-phishing-post-oct-2026) (live, Medium, Contained, since Oct 11, 2026)
- [Tampered Ledger wallets from an Asian reseller leak seed phrases; on-chain estimate puts losses near $102M](https://drains.watch/i/ledger-cryptobilis-tampered-hardware-wallets) (live, Critical, Partly contained, since Oct 9, 2026)
- [Brevo login flaw lets attacker email a fake Trezor 'STM32 entropy' alert to 347,000 subscribers](https://drains.watch/i/brevo-flaw-trezor-bitbox-phishing-emails-sep-2026) (closed, Medium, Contained, since Sep 9, 2026)