Reports of Ledger hardware wallet tampering have spread to Europe, though Ledger has not confirmed the European case, and an AI-assisted review uncovered a dormant XRP minting flaw. The incidents highlight ongoing hardware and protocol risks in crypto.
Correction (Oct 11): An earlier version stated $93.4M in losses as fact and implied the European device was confirmed tampered. The ~$92.9M figure is an on-chain estimate by Bitquery tied to devices sold by reseller CryptoBilis; Ledger has not confirmed the total or that the implant caused the losses. The European device is unconfirmed by Ledger, and its owner says no funds were taken.
Correction (Oct 11): An earlier version stated $93.4M in losses as fact and implied the European device was confirmed tampered. The ~$92.9M figure is an on-chain estimate by Bitquery tied to devices sold by reseller CryptoBilis; Ledger has not confirmed the total or that the implant caused the losses. The European device is unconfirmed by Ledger, and its owner says no funds were taken.
The firm reported that its AI discovered two low-severity bugs in rippled that could be chained to mint more than 18 trillion XRP in a single transaction.
The Ethereum co-founder agreed that rapid AI math advances could threaten current blockchain cryptography sooner than quantum computers.
Correction (Oct 11): An earlier version stated $93.4M in losses as fact and implied the European device was confirmed tampered. The ~$92.9M figure is an on-chain estimate by Bitquery tied to devices sold by reseller CryptoBilis; Ledger has not confirmed the total or that the implant caused the losses. The European device is unconfirmed by Ledger, and its owner says no funds were taken.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Upwind secured $400 million in Series C funding at a $3.8 billion valuation after revenue quadrupled in 2026. The capital will accelerate product work and go-to-market growth for its cloud and AI security platform.
ADT and Thrive Holdings announced an all-cash deal that values ADT at about $7.6 billion in equity value and $15.3 billion in enterprise value, according to the companies. ADT stockholders would get $10.00 per share, and the companies expect the deal to close in the first quarter of 2027, pending stockholder and US antitrust approval.
CISA says it added Linux kernel flaw CVE-2026-46300 to its Known Exploited Vulnerabilities catalog on Oct. 28, with a federal deadline of Oct. 31 and forensic triage required. CISA says it can be chained with two PHP flaws to implant webshells and run commands as root.
CISA says it added CVE-2026-41709, an insufficient logging flaw in Broadcom's VMware ESX, to its Known Exploited Vulnerabilities catalog on Oct. 28. The flaw requires admin access, and CISA lists a Nov. 11 federal deadline; it has not said who is exploiting it.
Sony Network Communications, the wholly owned Sony Group company behind the So-net internet service provider, says a third party accessed its So-net member database on Oct 19 and that up to about 2.6 million member records leaked, including 443,495 from plala (S Course) and 16 bank-account records. No credit card data leaked, Sony says.
