Cryptocurrency Wallet

A Tron address poisoning operator has stolen around $9.4 million from 15 victims in four weeks by using fake wallet addresses that closely matched genuine ones. The stolen funds were converted into USDD and sent to a single wallet, with two victims losing $2.5 million each.

ZachXBT traced $667,000 stolen in two violent home invasions in France to wallets he linked to the M1llionz alias. His investigation helped Tether freeze 93,507.51 USDT, while no arrests or charges have been announced.

Galaxy Research said losses from the Coldcard wallet attack have exceeded $115 million, with 1,778.58 BTC taken from 8,680 addresses since 30 July 2026. The attack exploited a firmware flaw affecting devices using software released in 2021, while most stolen Bitcoin remains traceable on-chain.

Changpeng Zhao transferred about $965,000 in BNB and BNB Life tokens to Giggle Academy, his free education project. He also plans to stop using the public wallet after unwanted meme coins made it difficult to manage.

DefiLlama tested a fake app after months of complaints to Apple and found it could drain a funded crypto wallet. Apple removed the app within days, but the incident delayed DefiLlama’s official mobile launch.

SafePal disclosed a data breach affecting about 39,798 customers after a flaw in its order-tracking system exposed names, contact details, addresses and purchase information. The company said wallet credentials and funds were not affected, but warned that the stolen data could be used for targeted phishing and impersonation scams.

Trezor has disclosed a data breach at its shipping and logistics partner ShipMonk that exposed the personal information of nearly 14,000 hardware-wallet customers, raising concerns that attackers could use the leaked data for targeted phishing campaigns — or potentially identify crypto holders for physical attacks.

Western Union is expanding beyond traditional money transfers with the launch of Stablecard, a Visa-backed payment card and digital wallet that allows customers to receive, hold and spend its USDPT stablecoin.

A volunteer Bitcoin security team used AI to review more than 390 open-source projects and found 4,962 potential security issues, including 85 critical vulnerabilities. The team is privately reporting confirmed flaws to developers and plans to release its AI security tools as open-source software.

Thousands of victims of the recent Coldcard hardware wallet hack are being encouraged to join a proposed legal action against wallet maker Coinkite—but the effort is being led by an FTX claims broker who was previously removed as a court-appointed receiver after a Delaware judge found he falsified corporate financial records.