Coverage of major security breaches, and lessons learned to help keep your assets safe.
3 min read
Liquid's recovery was reportedly funded by Blockstream, but direct federation withdrawals remain suspended with no confirmed reopening date.
The attack reportedly gave hackers administrator access to vulnerable installations, allowing them to drain connected hot wallets and steal funds.
A suspected cellular-enabled circuit board could capture recovery phrases and transmit them remotely, prompting Trezor to urge affected customers to replace their wallets.
7 min read
Binance says it has replaced most of the stolen assets using corporate funds and emergency reserves, while several digital asset firms have frozen billions.
The breach exposed personal details from 25,964 customer records, while Keystone says users' bitcoin, recovery phrases and private keys remain safe.
Attackers exploited Electrum’s RBF fee feature to trick users into signing fraudulent Bitcoin transactions, with at least one reported loss.
Ledger has confirmed a hardware implant that could expose wallet recovery phrases, while Trezor tightens oversight of its retail distribution network.
Researchers suspect tampered devices exposed recovery phrases, while Tether has frozen some USDT linked to the suspected thefts.
The recovered bitcoin is now held by a Wyoming trust, but identifying and verifying the rightful owners could prove difficult.
2 min read
Blink says non-custodial wallets were unaffected, while affected custodial accounts remain temporarily locked during its response.
Around 700 accounts may have been affected, with exposed data reportedly including identity documents, transaction histories and Bitcoin activity. And now the situation seems to have escalated to a new level.
Attackers exploited a shared email provider to impersonate Bitcoin companies, using fake entropy checks to pressure users into exposing wallet seed phrases.
AI is making vulnerabilities easier to find, but experts warn public disclosures can expose users to theft and scams before fixes are available.
Liquid halted its bridge nodes and L-BTC transfers after the exploit, while the attackers demanded a software fix before returning the funds.
ZachXBT says the planned platform could automatically reject requests from seven countries, citing poor cooperation from local authorities.
BitBox says existing wallet seeds remain safe, while a separate bootloader flaw required a successful phishing attack to exploit.
The service remains offline, while its new backers focus on repairing vulnerabilities and restoring swaps without a set restart date.
Researchers say AI is helping uncover serious security flaws in Bitcoin software, with experts privately alerting developers before attackers can exploit them.
No user funds were lost, with Boltz covering the losses, while its refund API and unilateral refund options remain available during the shutdown.
Attackers stole 1,367 BTC after a years-old RNG flaw weakened wallet seeds, and affected users are urged to create new recovery phrases and move funds.
Trezor says the flaw requires physical access, advanced lab equipment and device disassembly, with no known real-world exploits or risk to user funds.
5 min read
Lichtenstein stole nearly 120,000 BTC in 2016 (worth $71M then and over $10B today), with about 25,000 coins still missing despite a major DOJ recovery.
