Security
Every Security read CryptoBloggers has picked: 829 so far, 721 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 26 of 28- 1
Trezor Cuts Its Resellers After Ledger Finds Spy Implant in Crypto Wallets
Trezor ends reseller authorizations from Jan 1, 2027, after Ledger found a spy implant in wallets sold by a Southeast Asian retailer that exfiltrated recovery phrases.
- 2
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Ledger reports an unauthorized hardware implant in a wallet sold by CryptoBilis, linked to reports of fund theft.
- 3
UK crypto trader says almost $800,000 lost in knife attack as wrench attacks proliferate
A U.K. trader reports a knifepoint robbery of nearly $800,000 in crypto, adding to concern about wrench attacks in the country.
- 4
Working Together on Bitcoin’s Post-Quantum Readiness
Coinbase discusses collaborating on Bitcoin's post-quantum readiness, a relevant long-term security topic (snippet is empty, so depth is unclear).
- 5
I built a free site where people can compare photos and weights of their hardware wallets to spot tampered units. Looking for feedback
New crowdsourced site lets users compare photos and weights of hardware wallets to spot tampered devices.
- 6
Ledger confirms hardware implant in CryptoBilis reseller units as MediaMarkt suspends sales in Europe
Ledger confirmed a hardware implant in CryptoBilis-sold devices that steals recovery phrases, a major wallet supply-chain security event.
- 7
After Ledger’s Reseller Breach, Trezor Pares Back Who Can Sell Its Hardware Wallets
Trezor is cutting its reseller network after Ledger's reseller breach, though it did not say how many resellers are affected.
- 8
Consumer Protection Tuesday: Following the money. Stopping the scammers.
Coinbase post on tracing scam money flows and consumer protection; little detail in the snippet.
- 9
German Ledger reseller pauses sales following $86M draining incident
MediaMarkt pauses Ledger sales after tampered devices from CryptoBilis were linked to an $86M theft.
- 10
Shopinbit privacy claims are false. Customer data was stolen by hackers because it was stored online.
Shopinbit customers' data and invoices were stolen after the company stored them online despite privacy promises, per a Polish breach report.
- 11
Ledger Says Unauthorized Component in CryptoBilis Wallets Leaked Recovery Phrases Over Cellular
Ledger says an unauthorized cellular component in CryptoBilis wallets from a Southeast Asian reseller leaked recovery phrases, and all confirmed drains involve CryptoBilis-sold signers.
- 12
Mysten Reports Sui's First Native Quantum-Safe Devnet Transaction
Sui's devnet processed a native quantum-safe transaction using ML-DSA-65 signatures, with mainnet support targeted for Q1 2027 pending audits.
- 13
Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Ledger reports a hidden LTE chip that reads 24-word recovery phrases off the screen during setup, tied to a suspected $86M drain; a major hardware wallet security finding.
- 14
‘Leave’: Crypto Backlash Over French Proposal to Report Wallets Over $112K
A French proposal would require reporting crypto holdings above €100,000, drawing backlash amid wrench attacks in France.
- 15
After the Ledger Reseller Hack, Austin Campbell Says Self-Custody Users Should Be ‘Over-Solving for Simplicity’
Podcast takeaway after the Ledger reseller hack: self-custody users should favor simplicity and vetted vendors.
- 16
MediaMarktSaturn pulls Ledger products amid tampering reports
MediaMarkt pulled Ledger products in Europe while Ledger investigates tampering reports tied to CryptoBilis devices.
- 17
Ledger says 'spy' chip inside CryptoBilis Ledger devices transmitted wallet keys over mobile network
Ledger's first public account says a covert chip in CryptoBilis-sold devices could transmit master keys over mobile networks without any Ledger software change.
- 18
Autheo’s THEO Plunges 92% After Suspected Bridge Exploit on Base
Autheo's THEO token fell 92% after a suspected bridge exploit on Base involving a 19 million-token mint.
- 19
Ledger Spyware Found in Devices Across Asia, Europe, and South America
Ledger devices sold via a Southeast Asian reseller were reportedly tampered with to carry hidden implants, draining an estimated $72–93M. Reports of suspicious devices in Europe are unconfirmed.
- 20
Karpelès Says Airport-Bought Ledger Flex Contained Spy Implant
Karpelès says a Ledger Flex bought at an airport contained a spy implant, and the buyer identified the retailer as Metapod.
- 21
Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis
Ledger details LTE-enabled spy implants found in hardware wallets sold by reseller CryptoBilis, which exposed recovery phrases; CryptoBilis halted sales and Trezor and OneKey cut ties.
- 22
Crypto thieves sell hardware wallets with secret eSIM
Hardware wallets sold by thieves reportedly contained a hidden eSIM that could exfiltrate keys, a supply-chain attack vector worth knowing about.
- 23
Ledger Says CryptoBilis-Sold Wallet Implants Transmit Recovery Phrases Over LTE
Ledger says CryptoBilis-sold wallet implants can transmit recovery phrases over LTE, and its Genuine Check cannot detect this kind of tampering. A notable hardware wallet security finding.
- 24
Bitcoin’s Quantum Wake-Up Call: 1.79 Million Exchange BTC Have Exposed Public Keys.
Analysis claims 1.79 million exchange-held BTC have exposed public keys, a quantum-risk exposure worth understanding, though sourced from a forum post.
- 25
NEAR Intents’ General Manager Says Part of the $3.8 Million Exploit Came Back in Monero
NEAR Intents says part of a $3.8M exploit's proceeds came back in Monero and it is refilling contracts from its own funds to cover losses.
- 26
Aptos rolls out Encrypted Mempool to curb frontrunning, sandwich attacks
Aptos has launched an optional encrypted mempool that hides transaction details until ordering is final, targeting frontrunning and sandwich attacks.
- 27
Ledger Users Are Getting Robbed Because They Trusted Ledger (it's literally on the box)
Users report losses from a Ledger-related attack, which overlaps the tampered wallet story. Lower value than the primary Ledger confirmation.
- 28
The take home with this Ledger wallet "hack"
Reddit commentary on a Ledger wallet hack and cold-storage fears; thin on facts and mostly opinion.
- 29
I no longer own any real bitcoin
A long-time holder moved remaining bitcoin into a bitcoin ETN in a pension because self custody became too hard. A real signal about custody friction.
- 30
XRPL branded ‘cheap’ for paying infinite XRP exploiter just $250K
ZachXBT criticizes the XRPL for paying an infinite-mint exploiter only $250K, raising questions about bug bounty economics and security.