3 min read
A suspected cellular-enabled circuit board could capture recovery phrases and transmit them remotely, prompting Trezor to urge affected customers to replace their wallets.
The breach exposed personal details from 25,964 customer records, while Keystone says users' bitcoin, recovery phrases and private keys remain safe.
Foundation says attackers sent over 23,000 phishing emails after exploiting compromised API keys and accessing customer data, including addresses and phone numbers.
Attackers exploited Electrum’s RBF fee feature to trick users into signing fraudulent Bitcoin transactions, with at least one reported loss.
Ledger has confirmed a hardware implant that could expose wallet recovery phrases, while Trezor tightens oversight of its retail distribution network.
Researchers suspect tampered devices exposed recovery phrases, while Tether has frozen some USDT linked to the suspected thefts.
The recovered bitcoin is now held by a Wyoming trust, but identifying and verifying the rightful owners could prove difficult.
2 min read
Blink says non-custodial wallets were unaffected, while affected custodial accounts remain temporarily locked during its response.
Attackers exploited a shared email provider to impersonate Bitcoin companies, using fake entropy checks to pressure users into exposing wallet seed phrases.
BitBox says existing wallet seeds remain safe, while a separate bootloader flaw required a successful phishing attack to exploit.