Two more crypto hardware wallet makers have disclosed security incidents in recent days, adding to an extremely rough stretch for companies that sell devices meant to keep users’ bitcoin and other crypto assets offline and out of reach of remote attackers.

On Sunday, hardware wallet brand Foundation said phishing emails that appeared to come from its own domains claimed a supplier had modified display modules on some devices and that funds were actively being stolen. Keystone, another wallet provider, has also revealed that an attacker who accessed its website obtained a key used to verify whether a device is genuine, prompting the company to destroy nearly 19,000 unsold units.

The latest disclosures arrive after a…