The Crypto Devices Built to Foil Hackers Came With Spies Inside
Background
Background
Hardware wallets are physical devices that store a user's private keys offline and require physical confirmation for transactions, which is why they are marketed as the safest way to self-custody crypto. Supply chain attacks work differently from direct hacks: they compromise a vendor's production or distribution process so that tampered or planted components reach end users through legitimate channels.
Bloomberg published an investigation on October 18, 2026 reporting that crypto hardware devices marketed as resistant to hacking shipped with embedded surveillance or spy components. The report describes the problem as originating inside the devices themselves rather than from an external attack.
Hardware wallets are sold on the premise that private keys stay isolated inside a dedicated device; embedded surveillance components undercut that premise for the affected products. The finding shifts scrutiny to device manufacturing and distribution rather than to software vulnerabilities alone.
The reporting frames the issue as a supply-chain and privacy problem rather than a protocol exploit, and no confirmed loss of user funds has been reported.
google_news · Bloomberg.com · · Single source
Analysis and references
Impact analysis
The transmission path runs through custody trust rather than price: self-custody holders of bitcoin and other assets who rely on hardware devices, along with the hardware wallet vendors themselves, face renewed scrutiny over device provenance and supply-chain assurance. Any broader effect would depend on how widely affected devices are confirmed and on how users and vendors respond.
References
Tags
#hardware-wallets#supply-chain-security#surveillance#privacy#crypto-security