EVENT DOSSIER
Recent data breaches at two logistics companies have put cryptocurrency owners using physical hardware wallets at risk of having their funds stolen. Manufacturers of Trezor and SafePal reported that thousands of customers’ personal information and shipping details were compromised in data breaches by shipping partners. Hackers did not attack the offline wallets themselves but instead used the obtained names and addresses of high-net-worth individuals to carry out “wrench attacks,” forcibly obtaining the hardware wallets that stored seeds through brute-force methods. CertiK confirmed that the number of such attacks increased by 75% in 2025, and Chainalysis reported that approximately $30 million was lost this year. Additionally, the Coinkite Coldcard hardware wallet suffered a code vulnerability, allowing hackers to directly steal over $130 million in cryptocurrencies offline; victims claimed that despite proper operation, hardware defects still led to the loss of their funds.
近期两家物流公司的数据泄露事件使使用物理硬件钱包的加密货币所有者面临资金被盗的新风险。Trezor 和 SafePal 制造商报告，数千名客户在发货合作伙伴的数据泄露中个人信息及收货信息被窃取。黑客未攻击离线钱包本身，而是利用获取的高净值用户姓名和住址实施“扳手攻击”，通过暴力手段强行获取存储种子的硬件钱包。CertiK 证实 2025 年此类攻击数量同比增长 75%，Chainalysis 统计今年已损失约 3000 万美元。此外，Coinkite Coldcard 硬件钱包因代码漏洞导致黑客直接离线窃取超过 1.3 亿美元加密货币，受害者称尽管操作无误但硬件缺陷仍导致资金丢失。