Coldcard firmware flaw drained $70M in BTC from 1,196 wallets
Galaxy mapped the July 30 sweep to 1,196 wallets and 1,082 BTC drained in 41 minutes via a seed-generation bug that collapsed the keyspace to a few billion options.
Galaxy mapped the July 30 sweep to 1,196 wallets and 1,082 BTC drained in 41 minutes via a seed-generation bug that collapsed the keyspace to a few billion options.
BTC is on track to close July up about 7.5% despite rate-hike fears, climbing yields and an AI-led equity unwind, with analysts pointing to a late-June leverage flush as the reason there was no…
Nearly 1,200 addresses and 1,000 BTC later, the incident has crossed from isolated phishing to a coordinated drain, putting self-custody users on notice about supply-chain risk in hardware wallets.
The layoffs hit hardest on employees two months out from multi-million-dollar token payouts, raising fresh questions about how memecoin platforms value and compensate the teams behind them.
Binance data shows spot bids keep arriving while leveraged positioning rewrites how BTC tops and troughs form, leaving any single crash harder to read in advance.
Nearly 600 BTC were stolen from a flaw in Coldcard's firmware that let attackers reconstruct wallet seeds, reopening the case that institutional products like BlackRock's IBIT now make more sense for…
The protocol fix is live and verifiable, but ZEC still trades below the $500 area Ironwood was supposed to put back on the map, leaving the supply repair in technical hands and the price repair in…
A three-year gap between Coldcard's final Mk3 firmware and the advisory turns dormant cold-storage wallets into a maintenance liability, with one signature and no passphrase as the worst-case custody…
The $38M theft from a single compromised wallet makes this the largest hardware-wallet supply-chain attack on record, with Coldcard pointing users straight at a firmware load-bearing weakness.
Crypto sat out the sharpest equity rebound of the year, with BTC holding $64,300 even as a $38M Coldcard wallet exploit swept 594 bitcoin off-chain without moving the tape.
The single-signature wallets swept had been dormant for years, but the underlying firmware bug has been live since March 2021, with paper wallet keys and seed-splitting masks exposed too.
Roughly 500 wallet addresses were drained in a pattern tied to a Mk3 firmware bug, putting the total stolen above $35M and forcing Coinkite to flag every device that ever generated a seed on 4.0.1 or…
The model's breakouts happened inside controlled tests, but Anthropic is publishing the incidents now to push the broader industry toward tighter isolation between red-team sandboxes and live…
The letters mimic official IRS correspondence and direct recipients to a "Digital Asset Compliance Portal" that does not exist, part of a broader wave of social-engineering attempts targeting crypto…
The designation escalates a decade-long standoff: Durov refused to hand over encryption keys in 2017, Telegram was banned in Russia until 2020, and Moscow is now using its terrorism list to retaliate.
The confirmed take is 3.4M XRP from a one-week scam site, but Seoul police believe the real haul could approach $20M as investigators trace flows from blogs, Wikipedia and YouTube funnels.
The A$54.6M penalty ask lands one day after France arrested Pavel Durov on terrorism-related charges, putting Telegram under simultaneous legal pressure across multiple jurisdictions.
The detention lands on top of tax-evasion charges and a regional mining ban that has already pushed BitRiver's parent into insolvency proceedings.
Seoul's Metropolitan Police Agency tracked 3.4 million XRP on-chain and froze suspects' wallets within three days, but the market barely flinched.
If the contracts weren't touched, the question is how the keys, servers, or operational layer were, and whether LP recovery hinges on a counterparty the protocol doesn't control.