Wallet Security

31 stories
Wallet Security addresses the mechanisms and consequences associated with wallet private key protection, seed phrase storage, and transaction signing safety. Typical subjects range from wallet malware threats and hardware wallet security to multisignature access controls; device compromise response and wallet backup encryption provide evidence when they materially affect the result. Threats and controls are separated clearly, with address poisoning defense, self-custody threat models, and malicious wallet permission requests used to explain exposure, mitigation, and residual risk. Fraudulent schemes belong under Crypto Scams unless they directly compromise keys, devices, signing, permissions, backups, or recovery controls, which are the defining subjects here.

EU Imposes 24-Hour Breach Reporting for Crypto Wallet Makers

Crypto wallet makers selling in the EU must now alert cyber regulators within 24 hours if they discover an exploited security flaw, as the Cyber Resilience Act's rapid reporting regime takes effect for both hardware and software wallets.

Read more

Phishing Scam Targets Trezor and BitBox Wallet Owners With Fake Security Emails

Attackers used compromised email providers to send fake security alerts to Trezor and BitBox users, aiming to steal wallet recovery seeds. The incident underscores ongoing risks for hardware wallet holders and the need for careful security practices.

Read more

XRP Healthcare shuts down after wallet flaw exposes user funds

XRP Healthcare is closing operations after a critical wallet vulnerability led to the theft of over $450,000 in user assets. The project will delist its tokens and urges users to abandon compromised wallet credentials.

Read more

Bitcoin Theft Mastermind Pleads Guilty After $245 Million Crypto Heist

A 22-year-old Singaporean admitted to orchestrating a $245 million crypto theft ring that drained over 4,100 Bitcoin from a single victim and laundered funds into jets, supercars, and high-end real estate across the U.S.

Read more

Stolen Coldcard Bitcoin Moves to Ethereum in $1.6M Cross-Chain Shift

A stash of 20.5 BTC linked to the 2026 Coldcard hardware wallet theft has been swapped into Ethereum using THORChain, turning a dormant case into an active cross-chain investigation with new on-chain evidence and security implications

Read more

Bitcoin Hardware Wallet Bridge HWI to End Support for New Devices

Bitcoin's Hardware Wallet Interface (HWI), a key tool for connecting wallet software to hardware devices, will stop adding support for new models, raising compatibility concerns as its Rust-based successor remains unfinished

Read more

Bitcoin Payments: How to Send, Confirm, and Avoid Irreversible Errors

Sending Bitcoin for payments or transfers requires careful address verification, network selection, and fee review. Mistakes can lead to permanent loss, making step-by-step checks essential for users navigating on-chain and app-based payment flows.

Read more

Phantom to End Sui Wallet Support, Highlighting Interface Power

Phantom will remove Sui support from its wallet on September 24, cutting off in-app access to Sui balances and dapps. Sui assets remain onchain, but users must migrate to other wallets to transact or view funds.

Read more

Malicious Firefox Add-Ons Compromise Crypto Wallets in Targeted Attack

Dozens of Firefox browser extensions were found stealing crypto wallet secrets, forcing affected users to abandon compromised wallets and migrate funds. The campaign highlights ongoing risks for browser-based wallet security

Read more

AI Deepfake Scams Drive Crypto Losses to Record Highs in 2026

Losses from AI-driven deepfake scams have surged 263% in 2026, as attackers increasingly target users directly instead of exploiting blockchain code, exposing new vulnerabilities for exchanges, wallets, and individual crypto holders

Read more

Zilliqa Hardware Wallet Flaw Exposes Keys, Leads to $683M ZIL Theft

A critical bug in Zilliqa's Ledger hardware wallet app exposed thousands of user keys, enabling attackers to steal over 683 million ZIL. The incident highlights persistent risks in wallet software and the challenges of securing legacy blockchain infrastructure.

Read more

Ethereum's EIP-7702 Wallet Upgrade Exposes Millions to Attacks

A peer-reviewed study found that 63% of early EIP-7702 wallet authorizations were linked to attacker-controlled contracts, exposing millions in user assets and highlighting new risks for Ethereum and compatible chains

Read more

AI Agents Bring Voice-Driven Crypto Payments to Wallets and Cards

AI-powered conversational payments are moving beyond chatbots, letting users shop, book, and pay with natural language. But security, user control, and regulatory hurdles remain as platforms like MoonPay PayBox test new models

Read more

AI Agents and Crypto Payments: Who Really Controls Your Assets

AI-powered payment tools are making crypto transactions easier, but can they access your funds directly? Here's how non-custodial wallets, Passkeys, and advanced security tech keep user assets protected as AI enters the payment flow

Read more

SafePal Data Breach Exposes 40,000 Users as Wallet Risks Grow

A flaw in SafePal's order system left thousands of customer records exposed, highlighting how hardware wallet users now face escalating threats from both data leaks and direct crypto theft

Read more

ShipMonk Data Breach Exposes Trezor Buyers to Phishing and Theft Risk

A breach at ShipMonk compromised personal data for nearly 14,000 Trezor hardware wallet customers, raising concerns about targeted phishing and physical attacks as crypto-related security incidents accelerate in 2026.

Read more

Trezor Data Breach Exposes Crypto Wallet Buyers to Physical Risk

A breach at a Trezor shipping provider exposed thousands of customer names and addresses, raising concerns about targeted phishing and the potential for real-world attacks on crypto holders

Read more

Quantum Threat Could Trigger Undetected Crypto Wallet Breaches

Crypto security leaders warn that the first quantum computer attacks may resemble routine wallet losses, with high-value targets like Tether's minting key at risk and timelines for 'Q-day' now as early as 2028

Read more

Drift Protocol Attack Exposes Limits of Multisig Wallet Security

Multisig wallets are designed to prevent single-point failures, but the $285M Drift Protocol exploit shows that valid signatures alone can't stop social engineering or malicious transactions when thresholds are low and oversight is weak

Read more

Coldcard Wallet Exploit Triggers $130M Bitcoin Theft, ETF Inflows Surge

A vulnerability in Coinkite's Coldcard hardware wallet has led to $130 million in stolen Bitcoin, raising new questions about self-custody security as spot Bitcoin ETFs attract $382 million in inflows over two days

Read more

Crypto Security in 2026: How to Protect Your Digital Assets

Crypto theft in 2026 is driven by phishing, weak passwords, and compromised devices-not blockchain flaws. Learn how layered security, hardware wallets, and vigilant habits can reduce the risk of losing your cryptocurrency.

Read more

How Exodus Wallet Puts Crypto Users in Control of Their Keys

Exodus Wallet offers self-custody for over 275 cryptocurrencies, supporting staking, swaps, and NFT management across desktop and mobile. Users retain full control of their private keys and recovery phrases, with no access for Exodus itself.

Read more

AI Threatens Bitcoin Custody Security Before Quantum Computing Arrives

AI is accelerating the discovery of vulnerabilities in Bitcoin custody systems, raising new risks for cold storage and hardware wallets even as Bitcoin's core cryptography remains unbroken

Read more

Researchers Find Over 4,200 Malicious Smart Contracts Draining Crypto

A new study links thousands of deceptive smart contracts to millions in crypto losses, exposing how wallet simulations can mislead users and reroute funds to attackers across major blockchains

Read more

Coldcard Firmware Bug Drains $89M From Bitcoin Wallets

A March 2021 Coldcard firmware flaw let attackers steal about 1,367 BTC worth roughly $89 million from thousands of addresses. Researchers say vulnerable wallets remain at risk and urge immediate fund moves

Read more

Ctrl Wallet Users Face Asset Loss Risk as App Shuts Down August 3

Ctrl Wallet will disable all crypto transactions and dApp access on August 3, 2026, leaving only recovery-phrase export. Users must act before the deadline to avoid losing access to their blockchain assets.

Read more

Seed Phrase Backups Create Major Self-Custody Security Gaps

Lost or exposed recovery phrases still wipe out self-custody holdings more often than chain exploits. Here is how paper, single-site, and digital backups fail-and what UKey Seed Ring claims to change

Read more

UKey Seed Ring Offers Wearable Backup for Crypto Seed Phrases

UKey's Seed Ring stores wallet recovery indexes in a battery-free NFC ceramic ring, separating seed backup from transaction signing for self-custody users who want less fragile paper notes

Read more

Coldcard Hardware Wallet Flaw Exposes Bitcoin to Remote Key Theft

A vulnerability in Coldcard hardware wallets could let attackers remotely reconstruct private keys from seeds generated on certain firmware, putting user funds at risk and requiring urgent action.

Read more

Critical x402 Payment Flaws Expose Crypto Merchants to Theft Risk

A new security study has uncovered 31 vulnerabilities in x402 crypto payment facilitators, affecting nearly all observed transactions and putting merchants at risk of asset theft, free shopping, and increased operational costs.

Read more

Page 1 of 2