Key Highlights
- BitGo Research highlighted two hardware wallet incidents involving weak seed entropy and an alleged hardware implant, reinforcing the risks of relying on a single device and recovery phrase.
- Bitquery data put losses linked to the Ledger-related incident at approximately $102 million across 324 wallets on six networks, including $79.3 million on TRON.
- Multi-signature wallets can reduce single-key exposure by requiring multiple approvals, but their effectiveness depends on using diverse vendors, purchasing channels, and independent verification.
BitGo Research has examined hardware wallet incidents, tokenized Treasury developments and BlackRock’s comments on capital conditions.
In an October 17 post on X, BitGo Research highlighted findings from a report by Greg Cipolaro, the firm’s head of research. The analysis notes that self-custody users faced a second major hardware-wallet incident within ten weeks.
Hardware wallet incidents detail single-seed exposure
In July, Coldcard devices generated seeds with weak entropy between March 2021 and July 2026 because of a build error. Attackers could reconstruct private keys offline without physical access. Owners who added their own dice rolls during setup were not affected. Firmware updates do not correct seeds already generated under the flawed process.
In October, Ledger investigated drained wallets linked to devices sold by CryptoBilis, a reseller covering Malaysia, Indonesia, and the Philippines. Ledger confirmed an unauthorized hardware implant in at least one affected device and stated that every verified case was traced to CryptoBilis purchases. Ledger’s own systems and direct sales were unaffected.
The implant used a microcontroller to capture the recovery phrase displayed during setup and transmitted the words over the cellular network. Ledger described the incident as a physical supply chain attack and reported no indication that its software or internal systems were compromised.
Bitquery data cited by BitGo Research placed losses at $102 million across 324 wallets on six networks, including roughly $79.3 million on TRON, $16.8 million in Bitcoin, and $3.7 million on Ethereum. Earlier estimates were closer to $86 million. Theft addresses were funded on September 25 and conducted test transactions through October 7.
CryptoBilis, based in Kuala Lumpur, suspended sales of all hardware wallets. Its former founders stated that operational control passed to new management in March 2026. Ledger has not identified the precise point at which devices were altered.
BitGo Research observed that both incidents shared a common exposure: one seed on one device provided full control. The research stated that multi-signature arrangements could have limited the impact in both cases.
Multi-signature structures limit single-device compromise
A multi-signature wallet requires signatures from several keys before funds can move. Keys can be held on devices from different vendors obtained through separate channels. An implant that captured one Ledger seed in a 2-of-3 arrangement would control only one of the required keys. Unchained reported that 2-of-3 users faced no immediate risk when the Coldcard entropy flaw became known, because a single weak key could not meet the threshold. Holders retain time to retire a compromised signer and rotate to a new one.
BitGo Research noted limits to multi-signature setups. If all signers rely on devices from one vendor or a compromised reseller, an attacker may obtain enough keys. Multi-signature arrangements also do not prevent signers from approving a malicious transaction.
In the 2024 WazirX incident, attackers altered a smart contract and drained $234.9 million without using the signers’ keys. The research pointed to diversity of vendor, purchasing channel, geography, and entropy source, together with independent verification of what each signer authorizes or use of a custody provider that employs multi-signature, such as BitGo.
This discussion of multi-signature approaches follows earlier technical work on the subject. On July 21, Blockstream Simplicity ecosystem engineer Artem Chystiakov introduced an experimental Bitcoin multisignature protocol intended to reduce reliance on off-chain coordination.
In an X post, Chystiakov described a system in which participants communicate entirely through the blockchain rather than messaging apps, coordination servers, or other external services. He summarized the concept as a multisig protocol involving only the user, the front end, and the blockchain, using Simplicity to enable customizable policy enforcement rules and multisignature spending conditions.
Tokenized treasuries move into repo workflows
On October 13, BNY announced completion of a triparty repo workflow with Citadel Securities that used a tokenized representation of a U.S. Treasury. Citadel purchased a two-year Treasury note through BNY on Tradeweb. After execution, a tokenized representation was recorded on BNY’s private digital ledger and settled within minutes rather than on the standard T+1 cycle. Citadel then pledged the token as collateral in an overnight triparty repo, receiving cash from BNY.
BNY framed the transaction as tokenized assets moving into collateral and financing workflows. The bank plans to extend operating hours on its Fed-eligible securities and U.S. triparty platforms, with a view to European and Asian hours next year. The token remained on BNY’s private ledger. Interoperability with other platforms remains an open question. BNY also indicated plans for additional digital cash and tokenized deposit capabilities.
BitGo Research noted related activity through DTCC’s Tokenization Service. In July, DTCC conducted a limited production event for its tokenization service covering DTC-tokenized U.S. Treasuries and equities. BitGo Bank & Trust, described by BitGo as an OCC-regulated, full-service qualified custodian integrated with the service, provided custody for the tokenized securities and supported settlement for repo and reverse-repo transactions.
BlackRock earnings call and capital conditions
BlackRock’s third-quarter earnings call included remarks from CEO Larry Fink on capital allocation. Governments require financing for deficits, companies need funding for AI infrastructure, and individuals seek retirement solutions. Fink estimated U.S. needs for power, grid, and core-and-shell construction at $7 trillion to $9 trillion, and a one-gigawatt data center at roughly $50 billion. When claims on capital exceed supply, the price of capital rises.
Digital asset exchange-traded products recorded $8 billion in net inflows during the quarter, under 4 percent of BlackRock’s $205 billion total. Fixed-income products received $78 billion. Real yields near 3 percent raise the opportunity cost of holding assets that generate no cash flow.
BlackRock CFO Martin Small stated that traditional risk-on or risk-off frameworks no longer fully describe the environment, emphasizing capital allocation and diversification. Fink pointed to stronger growth, potentially reaching 3 percent or higher through AI-related investment, as a path that could reduce debt-to-GDP ratios.
Also Read: a16z’s Aerie Targets a Key Bottleneck in Post-Quantum Blockchain Design
