🔥 Bitcoin Wallet Maker BitBox Says AI Found Severe Flaws in Firmware.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief BitBox shipped the Dixence update after internal AI audits found two severe vulnerabilities plus a bootloader issue. Exploiting them required a successful phishing attack plus the user unlocking a tampered device. BitBox says no user funds were stolen and the wallet seed was never at risk. BitBox, the Zurich-based maker behind the BitBox02, released the Dixence security update this week after its own engineers uncovered two severe flaws in the cryptocurrency wallet's firmware. The company disclosed the issues itself, with no evidence they were ever exploited.
But the news itself is likely enough to set off the alarms of most Bitcoin holders, given the recent exploit of hardware wallet maker Coldcard thats resulted in over $130 million in stolen BTC. For BitBox, the first problem lives in the bootloader, the code that decides which firmware a device will accept. A fix shipped in July's Oeschinen release (v9.26.2) closed most of it, but BitBox now says the original issue was worse than first reported. An attacker who ran a phishing scamtricking a user into installing a fake BitBoxApp and unlocking the devicecould have loaded malicious firmware onto a genuine BitBox02 and walked off with the coins. The BitBox02 Nova, the newer model, was never exposed because of its bootloader version.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Citi to Launch Bitcoin Custody as Wall Street Pushes Deeper Into Crypto.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Citi expects to launch digital asset custody later this year, starting with Bitcoin. The service will let institutional clients access traditional and crypto custody through the same framework. Citi Token Services already supports 24/7 transfers of tokenized deposits in select markets. Citi is preparing to add Bitcoin custody alongside traditional assets as the banking giant builds out its digital asset infrastructure. Announced on Tuesday, the service will be part of Custody+, a suite of custody and settlement tools.
The bank said clients will be able to access traditional securities and crypto custody through the same framework. The announcement expands on plans Citi revealed in October to launch institutional Bitcoin custody in 2026. Custody+ is the product of a multi-year commitment to building infrastructure that matches the speed of our clients strategies, Amit Agarwal, Head of Custody at Citi Investor Services, said in a statement. We have designed each solution to help clients simplify their operating models amid increasing complexities in the operating environment. Citi said more than 80% of its asset-servicing event volume is now processed in real time. Its Citi Token Services platform also allows clients to move tokenized deposits nearly instantly, 24 hours a day, across select markets.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Japan's Metaplanet Plants Its Flag in the US With $132M Bitcoin Treasury Deal.
Source: DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Metaplanet agreed to contribute 2,100 BTC (~$132.1 million) plus $2.5 million in cash to Nasdaq-listed Super League Enterprise in exchange for stock, preferred shares and warrants, renaming it Superplanet (ticker: SUPA). The deal marks Metaplanet's first operating foothold outside Japan; CEO Simon Gerovich cast it as a way to compound a single group Bitcoin position. Benchmark-StoneX's Mark Palmer, who rates Metaplanet a buy and calls it the Strategy of Japan, said the deal stands out from recent shell-and-PIPE treasury deals because it's funded with Metaplanet's own Bitcoin. Metaplanet, the Tokyo-listed firm that became one of the world's largest corporate Bitcoin holders, is expanding to the United States, agreeing to seed a Nasdaq-listed Bitcoin treasury company with 2,100 BTC.
Under the deal announced Tuesday, Metaplanet will contribute the coins, worth roughly $132.1 million, plus $2.5 million in cash, to Super League Enterprise, a gaming media company, in exchange for stock, preferred shares and warrants. Super League will be renamed Superplanet, Inc. and trade under the ticker SUPA, becoming a consolidated Metaplanet subsidiary while keeping its existing advertising business running as a separate segment. Metaplanet will own about 95.7% of Superplanet's common stock at closing, expected in the fourth quarter.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Bitcoin Wallet Untouched for 15 Years Suddenly Springs to Life.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief A Bitcoin wallet holding 8.54 BTC, first funded on June 13, 2011, moved its coins for the first time in 15 years on Aug. The position is now worth about $538,000 for a roughly 461,981% gain if sold. It follows a trend of ancient Bitcoin wallets suddenly coming to life. A Bitcoin stash that had sat frozen since the network's earliest days has moved for the first time in more than 15 years, the latest in a string of ancient wallets flickering back to life.
According to Galaxy Research's blockchain monitoring, a Bitcoin address beginning in 1Emi holding 8.54 BTC first received the coins on June 13, 2011, when Bitcoin traded around $14, and then went silent for 15.1 years. The balance, now worth roughly $538,000, was swept out on Aug. 16 in a single transaction recorded in block 962,770. At an average cost basis near $14, the position represents a gain of about 461,981%.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 PUMP Prints First Golden Cross as Revenue Hits Seven-Month High.
Morning Minute: PUMP Prints First Golden Cross as Revenue Hits Seven-Month High Price data by DecryptNewsOpinionMorning Minute: PUMP Prints First Golden Cross as Revenue Hits Seven-Month HighPlus, Ethereum researchers are prioritizing privacy; Robinhood is rolling out agentic trading; and Ansem debuts his own launchpad.By Tyler WarnerEdited by Stephen GravesAug 18, 2026Aug 18, 20265 min readPump.fun is a Solana meme coin launchpad. Image: Pump.fun/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.Morning Minute is a daily newsletter written by Tyler Warner. The analysis and opinions expressed are his own and do not necessarily reflect those of Decrypt. PUMP Prints First Golden Cross as Revenue Hits a Seven-Month High Pump.funs PUMP token has had a rough 10-month stretch after hitting $8B back in September 2025. But that rough stretch appears to be over.
PUMPs 50-day EMA is crossing above its 200-day EMA for the first time since the token launched in mid-2025, what technical analysts call the golden cross. The token bottomed at $0.001491 in July and touched $0.003 intraday Monday before settling near $0.002733. The token is pumping for a reasonthe fundamentals are improving. DefiLlama puts Pump.fun at $11.52 million in seven-day revenue, fourth among every protocol in crypto behind only Tether, Circle, and Canton, and ahead of Polymarket, GMGN, Tron, and Axiom Pro. Its weekly revenue was 2x that of Hyperliquid, which trades at $59B FDV (over 20x PUMP). Annualized revenue now runs at $458 million against a $1.09 billion market cap.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Bitpanda Hit With Europe's First Published MiCA Penalty in Austria.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Austria's FMA fined Bitpanda 70,000 euros (~$82,000) in what stands as the first publicly disclosed enforcement penalty under the EU's Markets in Crypto-Assets Regulation (MiCA). The breaches were procedural and disclosure-relatedfailing to submit a white paper to the regulator 20 working days before publishing it, running a marketing communication before publishing the underlying white paper, and omitting a required disclaimer and contact detailsrather than fraud or investor-loss allegations; the ruling is legally final.
The case lands as MiCA's transition period for crypto firms winds down across the bloc, with Brussels also expected to revisit the framework in 2027 to tighten oversight of foreign stablecoin issuers. Austrian regulators have fined crypto exchange Bitpanda 70,000 euros, roughly $82,000, in what stands as the first publicly disclosed enforcement penalty under the European Union's landmark crypto rulebook.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Treasury Proposes Rules Defining Who Can Legally Sell Stablecoins in US.
Treasury Secretary Scott Bessent. Image: United States Department of the Treasury/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Treasury proposed rules defining when stablecoins are issued, offered, or sold in the US under the GENIUS Act. Beginning January 18, 2027, issuers generally must obtain a federal or state license to issue payment stablecoins in the US. Starting July 18, 2028, crypto platforms generally cannot sell stablecoins to US customers unless they come from an approved issuer. Department of the Treasury proposed rules Monday defining which stablecoins can be issued or sold in the United States under the GENIUS Act.
The proposal implements Section 3 of the GENIUS Act, signed into law last summer. According to the proposal, beginning January 18, 2027, stablecoin issuers generally must obtain a federal or state license. Platforms can also sell foreign-issued stablecoins, but only if the foreign issuer complies with U.S. legal orders and agreements between the U.S. and the country where it is regulated.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 XRP Price Holds to Near Two-Year Streak, But Charts Flash a Warning Sign.
But both the daily and weekly charts are now flashing red.By Jose Antonio LanzEdited by Guillermo JimenezAug 17, 2026Aug 17, 20264 min readXRP is a top crypto asset by market cap. Source: Decrypt/ShutterstockCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief XRP is trading around $1.00, clinging to the dollar price line it's defended since Trump's 2024 win. The daily chart is bearish, and the weekly chart is now converging. With XRP deep in oversold territory, will it give holders a bounce? Crypto is grinding through what can be considered an extended bear market with no confirmed bottom in sight.
Bitcoin is down more than 3% this week and stuck below $64,000, while Ethereum is struggling to hold onto $1,900, with traders still debating when this slide actually ends. Wall Street is having a completely different Monday. The S P 500 and Nasdaq are hovering near recent highs, with AI stocks catching another bid after Bloomberg reported Anthropic posted $11.5 billion in quarterly revenue and is now meeting banks about a possible IPO. Crypto, in general, is starting the week mostly flat, with most of the coins in the top 10 moving less than 2% in either direction. For XRP, thats arguably a good thing, considering how strong bears have been.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Solanas Pump Token Leads Crypto Market Gainers as Chart Paints Golden Cross.
Protocol revenue on the Pump.fun app hit a new weekly high of $10.03 million on August 11. The crypto market is up 1.1% on a Monday that opened with Fear Greed Index score at 39, meaning markets may still be fearful, but they're not in panic mode anymore. Meanwhile, the Altcoin Season Index is at 44 out of 100, which typically means traders go to Bitcoin as a hedge against volatility and overly bearish movements. Bitcoin dominance remains high enough that most altcoins are treading water.
The native token of the Solana meme coin factory, Pump.fun, is not treading water. Pumps token, which trades as PUMP, is the best-performing coin in the top 100 on the day, posting almost 9% of gains in todays trading session. And the technical signals are finally backing up what the revenue numbers suggested weeks ago. PUMP bottomed at $0.001491 in July and has since nearly doubled, touching $0.003000 intraday today before settling at $0.002933.
The monthly gain sits at roughly 90%, per CoinMarketCap The 50-day Exponential Moving Average, or EMAwhich tracks short-term price momentum by weighting recent closes more heavily, is crossing above the slower and longer-term 200-day EMA, which represents the long-term trend baseline. That crossover, called a golden cross, signals a structural shift from a bearish trend to a bullish one. It's not a guarantee of continuation, but it is the first time since PUMP launched in mid-2025 that short-term momentum has overtaken the long-term average from below. After months in which the 200-day served as a ceiling, it's now beginning to act as a floor. The Average Directional Index, or ADX, measures trend strength independent of direction on a scale from 0 to 100. Anything above 25 is considered a trending
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Ethereum Developers Target Privacy Changes in Next Major Upgrade.
Image: Decrypt/ShutterstockCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Ethereum Foundation researchers want Frame Transactions and FOCIL prioritized for the Hegot upgrade. Frame Transactions and related proposals could let privacy pools pay their own fees without relying on third parties. Developers are considering 66 proposals for the 2027 upgrade, with FOCIL currently the only confirmed addition. Ethereum developers are considering changes that could let privacy pools pay their own transaction fees, reducing their reliance on third-party services that can expose wallet activity.
In a post on X on Monday, Ethereum Foundation researcher Toni Wahrsttter said the Protocol Architecture team wants to prioritize two proposals for Hegot, the major Ethereum upgrade scheduled for 2027: Frame Transactions (EIP-8141), which would give wallets more control over how transactions are executed, and Fork-Choice Enforced Inclusion Lists, or FOCIL (EIP-7805), which would make it harder to censor eligible transactions. Together with Frames, these enable privacy pools where the pool itself can pay fees, removing the need for intermediaries, Wahrsttter wrote. Add FOCIL support and privacy transactions also gain protocol-level inclusion guarantees. Frame Transactions would work with Keyed Nonces and Recent Roots (EIP-8272) to let privacy pools pay their own fees without an intermediary.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief The SEC abruptly canceled a Friday open meeting that would have launched formal rulemaking on Regulation Crypto Assets, a new framework for crypto fundraising, just three days after announcing it. Sources say Wall Street trade group SIFMA, which has lobbied against broad regulatory exemptions for crypto and tokenized-securities firms, raised the prospect of legal action over the SEC's statutory authority, contributing to the agency standing down.
The policy conversation continues this week with a White House event Wednesday featuring Trump and top crypto executives, the CFTC's inaugural Innovation Advisory Committee meeting Thursday, and ongoing Clarity Act negotiations ahead of a September 15 cloture vote. More drama in Washingtons ongoing crypto policy debate unfolded Friday when the Securities and Exchange Commission abruptly canceled a meeting that would have kicked off the formal rulemaking process for a new framework governing crypto fundraising in the United States, known as Regulation Crypto Assets.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Tom Lees Bitmine Buys Another $19 Million in Ethereum as Stash Nears 5% of Total Supply.
Image: Fundstrat/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Bitmine holds 5,815,164 ETH, worth roughly $11 billion, with total crypto, cash, and other holdings of $11.4 billion. The company has staked 5,067,309 ETH through its MAVAN validator network, worth about $9.6 billion. Bitmine repurchased 1.7 million shares over the past week, bringing total buybacks since July to 20.8 million shares. Bitmine Immersion Technologies has purchased another 9,926 Ethereum tokens, worth roughly $19 million, bringing its total holdings to 5.82 million ETH.
The company's Ethereum treasury is now worth about $11 billion, putting the crypto treasury firm within striking distance of its goal to own 5% of ETH's circulating supply. In an announcement on Monday, Bitmine said its treasury now includes 5,815,164 ETH and $11.4 billion in total crypto, cash, and other holdings. Its Ethereum position represents 4.8% of ETH's 120.7 million circulating supply. Chairman Tom Lee said Bitmine is 96% of the way to its self-described Alchemy of 5% target, which the company set when it began buying ETH weekly 14 months ago.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
Image: Swan Bitcoin/YouTube/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Strategy made no Bitcoin purchases or sales in the week to August 16, leaving holdings at 840,447 BTC. It raised $333.7 million selling MSTR shares, splitting the proceeds between preferred dividends, a STRC buyback and its dollar reserve. The firm's USD reserve reached $4.8 billion, with $653 million left under the preferred repurchase program. Strategy made no Bitcoin purchases or sales last week, according to an 8-K filed Monday, ending a run of weekly disposals that had funded its dividends and buybacks since June. Its stack stands at 840,447 BTC, unchanged, at an average purchase price of $75,385.
The Bitcoin treasury company instead raised $333.7 million net by selling 3,458,866 MSTR shares, at an average of about $96.48, down from $99.17 the week before. The filing splits the proceeds three ways: $52.4 million to pay dividends on its STRC preferred stock, $132.2 million to buy that stock back, and $149.1 million into its dollar reserve. Strategy increased its USD Reserve by $150M and repurchased $132M of $STRC . This increased USD Duration by 41 days to 2.8 yrs and tightened STRC's BTC Credit by 4 bps to 114 bps. As of 8/16/26, we hold 840,447 in our BTC Reserve and $4.8B in our USD Reserve.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Pirated Copies of 'The Odyssey' Are Hiding Crypto-Stealing Malware.
Image: Universal Studios/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Bitdefender found fake pirated copies of The Odyssey circulating within days of its release, disguised as HD movie rips but actually Windows executables that install crypto-stealing malware. The malware also steals authentication cookiesletting attackers hijack accounts even with multi-factor authentication onand hides behind VLC-style icons. The case fits a broader pattern of wallet-draining malware riding in on desirable content.
Fans trying to grab an illicit copy of The Odyssey may end up handing over their crypto wallets instead. Security firm Bitdefender said this week that fake pirated downloads of the newly released blockbuster are already circulating loaded with Lumma Stealer, an information-stealing malware that hunts for cryptocurrency wallets among other sensitive data. According to Bitdefender, the malicious files surfaced within days of the film's launch, disguised as high-definition WEBRip and Blu-ray rips with names mimicking legitimate torrent releases.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Paul Tudor Jones' Firm Buys Back Into BlackRock Bitcoin ETF After a Year of Selling.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Tudor Investment increased its stake in BlackRock's IBIT to 688,529 shares (~$22.9 million) as of June 30, an 18.9% jump from the prior quarter, reversing a year of selling, per its latest 13F filing. The firm also cut its reported IBIT call options by about 85% while keeping puts roughly flat, suggesting a move from leveraged positions toward straightforward spot exposurethough the stake remains far below its late-2024 peak of over 8 million shares. The buying, from a longtime Bitcoin-as-inflation-hedge advocate, lands amid renewed institutional ETF interest.
Tudor Investment, the macro hedge fund founded by billionaire Paul Tudor Jones, added to its stake in BlackRock's spot Bitcoin ETF last quarter, reversing a year-long stretch of selling. The Connecticut firm held 688,529 shares of the iShares Bitcoin Trust, or IBIT, valued at about $22.9 million as of June 30, according to a 13F filing submitted to the Securities and Exchange Commission on Aug. That marks an 18.9% jump from the 579,083 shares it reported at the end of March, a net addition of 109,446 shares.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Dutch Prosecutors Sell $2.5M of Crypto From Bankrupt Platform Knaken.
Source: Decrypt/ShutterstockCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Dutch prosecutors have sold the cryptocurrency seized from Knaken, a collapsed Dutch crypto platform, raising $2.5 million (2.2 million) for creditors. The trustee estimates customers put in $12 million to $14 million, and says the sale proceeds are currently the only money in the estate. A lawyer for one affected customer has questioned whether prosecutors were entitled to sell the holdings at all. The Dutch Public Prosecution Service has sold the cryptocurrency it seized from Knaken, raising $2.5 million (2.2 million) toward paying the collapsed platform's creditors, according to court-appointed trustee Carl Hamm.
Knaken let customers in the Netherlands buy, trade and store cryptocurrency through an app, operating without the license the country's markets regulator requires. It went offline in early June, and a Rotterdam court declared it bankrupt on July 16 after prosecutors sought the winding-up in the public interest. Hamm estimates customers put in $12 million to $14 million (10 million to 12 million), and told local broadcaster Rijnmond the sale proceeds are currently the only money in the bankruptcy estate. He has written to about 6,300 customers telling them to temper expectations.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 SafePal Bitcoin Wallet Data Breach Stokes Fears of Physical Attacks.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief SafePal disclosed that an order-tracking plug-in flaw gave attackers access to personal datanames, emails, shipping addresses, phone numbers and purchase detailsfor roughly 39,798 customers. The exposed mix of addresses and proof of crypto ownership raises the risk of physical targeting as wrench attacks surge, with Chainalysis documenting 46 violent incidents and over $30 million stolen in the first half of 2026, on pace for a record year. SafePal joins a string of wallet firms hit by leaksTrezor's recent ShipMonk breach exposed ~13,700 customers, and Ledger's 2020 leak of ~272,000 led to ransom threats.
Bitcoin and crypto wallet maker SafePal said Saturday that a flaw in an order-tracking plug-in gave attackers unauthorized access to the personal information of roughly 39,798 customers, the latest breach to put a hardware wallet company's users at risk of being physically targeted. In a statement posted to X, SafePal said the exposed data spans customers who placed orders between March 2, 2025, and April 11, 2026, and includes names, email addresses, shipping addresses, phone numbers, and purchase details. The company stressed that wallet credentials themselves were untouched, saying seed phrases, private keys, wallet passwords, bank details, payment card numbers and government IDs were not involved.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Trump-Linked World Liberty Gets Conditional Bank Charter for USD1 Stablecoin.
Image: Decrypt/ShutterstockCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief The OCC granted preliminary conditional approval for World Liberty Trust Company, a Florida-based national trust bank tied to the Trump family's World Liberty Financial. As a trust bank it won't take deposits, carry FDIC insurance or seek a Fed master account for now. Commenters raised conflict-of-interest concerns over ties to Trump, his family and Emirati investorswhich the OCC dismissed as outside its scope. The Office of the Comptroller of the Currency on Thursday granted preliminary conditional approval for a national trust bank tied to World Liberty Financial, the crypto venture backed by President Donald Trump and his family, clearing a major hurdle for the firm's dollar-pegged stablecoin.
The proposed institution, World Liberty Trust Company, National Association, would be based in Bay Harbor Islands, Florida. According to the OCC's decision letter, it plans to issue and redeem USD1, World Liberty's stablecoin, taking over that role from BitGo, the current exclusive issuer and custodian. The bank would also provide digital-asset custody as a fiduciary and let custody clients convert approved stablecoins into USD1. As a trust bank, it won't take deposits, carry FDIC insurance or, for now, seek a Federal Reserve master account, and it committed to staying outside the definition of a bank under the Bank Holding Company Act.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 France Tax Data Leak Could Fuel Scams, Attacks Targeting Bitcoin Holders.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief A reported breach of Frances tax authority exposed data tied to 678,437 people and businesses. The records allegedly include income figures, addresses, tax identifiers, and family information. The data could help criminals craft targeted scams against wealthy taxpayers and Bitcoin holders.
A hacker is selling a trove of French tax records that could expose more than 678,000 people and businesses, including Bitcoin holders, to phishing, identity theft, and targeted attacks. According to a report by French cybersecurity outlet FrenchBreaches, a hacker is selling records allegedly stolen from Frances tax authority, the DGFiP, during a June breach for several thousand euros. More bad news for Bitcoiners living in the leading country for wrench attacks, Chief Security Officer at Bitcoin security platform Casa Jameson Loop wrote on X.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.
🔥 Coldcard Bitcoin Thefts Slow, But Losses Could Top $150 Million: Galaxy.
Image: Shutterstock/DecryptCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.In brief Galaxy Research now puts the Coldcard exploit's confirmed haul above 1,778 BTC (about $112 million), with a suspected fourth wave that would lift it to 2,417 BTC. No confirmed attacker activity has appeared after August 6, across three major waves and more than 30 smaller footprints. Galaxy has spoken to 190-plus victims directly and still tells single-signature Coldcard holders to move funds to fresh addresses. Stolen Bitcoin losses from the massive Coldcard wallet exploit have begun to slow, but the total amount of BTC swiped continues to climband the worst may not be over just yet.
Thats the latest from Galaxy Research, the crypto research firm thats been tracking the exploit from the start. The company said Thursday that the Coldcard seed-recreation exploit has now drained more than 1,778 BTCroughly $112 millionand the final figure will likely be higher. Galaxy said it has very high confidence in the tally, which counts confirmed, owner-attributed thefts since the attack opened on July 30, per its running thread on X. Attackers have been executing this attack since at least early morning July 30, 2026, systematically recreating Coldcard-generated seeds and sweeping the funds onchain, Galaxy Research wrote.
❓ What's your take is this the start of a bigger move or just noise? Drop it below.