Coldcard Exploit Whitehats Move 52 BTC to Recovery Trust
The transfer offers a recovery path after a wallet-seed flaw exposed more than $100M, but funds under the old randomness remain at risk despite Coldcard’s firmware patch.
The transfer offers a recovery path after a wallet-seed flaw exposed more than $100M, but funds under the old randomness remain at risk despite Coldcard’s firmware patch.
The incident exposes a deeper lending risk: an oracle can price collateral accurately enough on paper while thin markets make liquidation losses unavoidable.
A compromised authorization key and dormant NuNet minter drove the losses, while paused conversions and unrevoked credentials leave remediation as the key test.
296.4 ETH has been returned to the DAO multisig, but the plan still lacks a Snapshot vote, per-pool allocation tables and a claim window, leaving LP payouts undefined.
The penalty puts privacy compliance back in focus as a direct regulatory and financial risk for Big Tech operating across the European Union.
The Sept. 14 patch closes three peer-triggered attack paths, including one that could turn a node's entire local channel balance into miner fees.
The case puts creator-reward fraud and coordinated engagement under scrutiny, with X seeking repayment and damages after terminating nine linked accounts.
The case puts creator monetization controls under scrutiny, with X seeking an additional $100,000 for investigation, remediation and prevention measures.
The case puts creator-revenue safeguards and engagement integrity under scrutiny, with X seeking repayment, damages, interest and legal costs.
The allegation focuses attention on the scale of financial crime and the difficulty of measuring taxpayer losses across fraud networks.
The allegation puts Polymarket’s growth-first culture and compliance controls under sharper regulatory scrutiny as prediction markets expand.
The incident shifts the risk question from key custody to software validation, while insurance terms decide whether customers recover coins, dollars, or less.
Checkout.com at one point rejected more than 80% of Polymarket US deposits as fraudulent, versus a roughly 1% industry norm, while the CFTC probes the firm ahead of a potential 2027 IPO.
Hong Kong, Japan and MOEX pushed licensed crypto rails this week while Jiangsu declared RWA financing illegal and North Korean hackers hit 7,000 wallets, a split-screen view of Asia's digital asset…
The case underscores physical-security risks around crypto wealth, while investigators have not confirmed a crypto motive or identified any financial loss.
The allegations put AML controls and regulatory exposure at the center of Polymarket's expansion after its processor rejected more than 80% of deposits as fraudulent.
The cross-border pilot turns asset tracing into a coordinated law-enforcement process, with members set to decide on permanent adoption in November 2026.
Chainalysis found AI-linked scam operations generated about 4.5 times more on-chain revenue, while the FBI recorded $893.3M in AI-related reported losses in 2025.
The reported attack chain reaches from Safari to kernel-level access, putting private keys and seed phrases stored on affected devices at direct risk.
Faster local models can keep personal context on-device, but wallet authority still depends on deterministic limits, assertions and human approval.