Changpeng Zhao, former Binance CEO, has publicly warned crypto holders after an $86 million theft linked to Ledger hardware wallets and a separate $142 million exploit affecting Coldcard, a combined $228 million in losses that has placed the security model of self-custody hardware wallets under renewed scrutiny.

The two incidents surfaced within the same news cycle, prompting Zhao to address users directly. His warning, reported by TradingView, centers on the operational risks that persist even when private keys are held in offline storage — the core selling proposition of hardware wallet manufacturers.

What happened in the two incidents?

The larger of the two cases involves $142 million tied to Coldcard, a hardware wallet manufacturer known for its air-gapped signing design marketed toward security-conscious users. The second incident involves $86 million connected to Ledger, the French hardware wallet maker whose devices serve one of the largest retail self-custody bases in the industry.

At this stage, the exact technical root causes — whether supply-chain compromise, firmware tampering, user-side seed exposure, or social engineering — remain subject to verification. What is confirmed is the scale: eight-figure losses in both cases, and a public warning from one of the most recognizable figures in the industry.

Why does CZ's warning matter?

Zhao's intervention carries weight well beyond a routine security advisory. Since stepping down as Binance CEO in late 2023 following his guilty plea on U.S. anti-money-laundering charges, he has remained one of the most-followed voices in crypto, and his public statements routinely move user behavior at retail scale.

His warning comes at a moment when self-custody is not merely a preference but a policy position. Regulators and legislators in the United States and Europe have pushed users toward non-custodial arrangements following the collapses of centralized platforms such as FTX. If hardware wallets — the flagship products of the self-custody segment — cannot demonstrably secure user funds, the operational foundation of that policy shift weakens.

What are the business consequences for wallet makers?

For Ledger and Coldcard's manufacturer Coinkite, the stakes are reputational and commercial. Hardware wallet sales depend entirely on trust in the device chain of custody, from fabrication through firmware updates to end-user signing. Any incident attributed to the device layer — rather than to user error or phishing — calls that chain into question and exposes manufacturers to customer attrition and potential litigation.

The incidents also raise due-diligence questions for institutional adopters. Entities that integrated hardware wallet infrastructure into treasury or custody operations may now face pressure to audit their device provisioning processes and to diversify signing hardware across vendors.

How should holders respond in practice?

Zhao's warning underscores standard operational hygiene: verify firmware through official channels, never enter seed phrases into any software interface, and treat any unsolicited recovery or migration prompt as an attack vector. For holders of large balances, multisignature configurations that distribute keys across devices and jurisdictions remain the structural mitigation against single-device compromise.

The coming weeks will determine whether either incident traces back to the manufacturers' device chain or to user-side compromise — a distinction that will shape both the legal exposure of the companies involved and broader confidence in hardware-based self-custody.