Security
Every Security read CryptoBloggers has picked: 829 so far, 721 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 27 of 28- 1
Ledger Investigates Fund Losses Tied to Southeast Asian Reseller After Implant Found in Device
Ledger investigates fund losses tied to a Malaysian reseller after an implant was found in signing devices; a supply-chain security warning for hardware wallet buyers.
- 2
Gordian Seed Tool for iOS
A user asks for a threat review of a Gordian seed tool setup on an old iPhone. Useful for security-minded readers, but the post is a question, not analysis.
- 3
Ontology Restarts Mainnet After Nearly 43-Hour Security Halt
Ontology restarted its mainnet after a nearly 43-hour security halt; losses at an unnamed ecosystem project remain unresolved.
- 4
Ledger Says All Confirmed Cases in Suspected $87M Drain Tied to Reseller CryptoBilis
Ledger says all confirmed cases of an $87M drain trace to reseller CryptoBilis, which has stopped selling hardware wallets; its direct sales are unaffected.
- 5
A fake crypto wallet app got through Apple's App Store review and drained my BTC. There's no way to actually talk to a person at Apple about it
A user reports losing bitcoin to a fake wallet app that passed Apple App Store review, and says Apple offered no human support channel. A useful warning about app store security.
- 6
XRP Ledger’s Payment Engine Had a Counterfeiting Bug Hiding Since 2015
A integer overflow bug in the XRP Ledger payment engine, dormant since 2015, could have let attackers mint XRP beyond total supply.
- 7
OneKey drops CryptoBilis and offers replacements after $86 million Ledger wallet incident
OneKey is dropping CryptoBilis as a vendor and offering replacements following an $86M Ledger wallet incident, a notable security-supply-chain development.
- 8
Explanation Of How A Hardware Supply Chain Attack Of A Ledger Wallet Works
Explanation of how a hardware supply chain attack on Ledger wallets works, useful context on the wider incident, though from a forum post.
- 9
Buyer Reports Second Tampered Ledger From MediaMarkt, Calls for Recall
A buyer reports a second tampered Ledger bought from MediaMarkt via distributor Aqipa and calls for a recall; the device is going to Ledger for analysis.
- 10
Self Custody and Security Challenges and BTC Demand
Discussion of self-custody seed phrase management as a barrier to bitcoin adoption and a source of lost coins.
- 11
Ledger implant tests Bitcoin ETFs as safer custodial solutions than hardware wallets
An unauthorized implant found in a Ledger device prompts a debate on whether Bitcoin ETFs are safer custody than hardware wallets.
- 12
OneKey Cuts Off CryptoBilis, Offers Free Wallet Replacements
OneKey will replace wallets bought from the CryptoBilis reseller between March 1 and Oct. 12, with applications due by Dec. 31.
- 13
Karpelès Flags Another Ledger Implant as Company Keeps CryptoBilis Warning
Ledger's own documentation admits Genuine Check cannot detect implants that leave the secure chip intact, affecting buyers beyond one reseller.
- 14
Ledger spyware scare spreads beyond Southeast Asia
Mark Karpelès reports spyware found in Ledger wallets bought from resellers across several regions, widening the security scare.
- 15
(Post-Quantum) Cryptographic Right Answers
Filippo Filippo's practical guide to choosing post-quantum cryptography primitives; a useful technical reference, though the post is only lightly socially validated so far.
- 16
Bitquery Says $10 Million Frozen in CryptoBilis-Linked Wallet Drains
Bitquery estimates $93.2M in losses across six chains tied to CryptoBilis-linked wallet drains, with about $10M frozen. Ledger has offered no repayment plan for affected buyers.
- 17
Ledger claims CryptoBilis cases are limited as up to $93M is traced, $10M frozen
Ledger says CryptoBilis cases are limited to one Southeast Asian reseller, with up to $93M traced and $10M frozen; critics question the authorized sales channel.
- 18
UK Freezes $12M London Penthouse of Alleged Prince Group Finance Chief
UK froze a $12M London penthouse tied to the alleged finance chief of the Prince Group scam network linked to $14B in bitcoin.
- 19
Ledger confirms hidden chip in crypto wallet amid $92M theft claims
Ledger is responding to claims of a hidden chip in its wallet tied to a $92M theft allegation; the story is still developing and the evidence is thin so far.
- 20
Ledger confirms spy chip implant behind wallet crypto thefts
Ledger has confirmed a hidden spy chip was found in hardware wallets tied to crypto thefts, a major security story for anyone holding hardware wallets.
- 21
XRP Ledger Fixes Bug That Could Have Broken the Token’s Fixed Supply
XRP Ledger patched a bug that could have broken its fixed supply, shipped without an amendment vote, a notable protocol security event.
- 22
Why a bug that could have threatened XRP's 100 billion supply cap stayed hidden for years
The XRP Ledger Foundation explains why a bug that could have breached the 100 billion XRP supply cap went undetected for years.
- 23
Ledger says unauthorized implant found in at least one device sold by CryptoBilis
Ledger confirmed an unauthorized hardware implant in at least one device sold by reseller CryptoBilis, linked to crypto losses; it says its own systems are unaffected.
- 24
CZ Alleges Hackers Bought CryptoBilis as Ledger Probes Wallet Drains
CZ alleges hackers acquired CryptoBilis, a reseller tied to Ledger wallet drains, and the former founders say operations changed hands in March.
- 25
Coinbase AI Agent Cuts Fraud by 30% in Onramp Experiment
Coinbase reports an AI agent cut fraud by 30% in an onramp experiment.
- 26
Ledger Confirms Hardware Implant as Tampered Wallet Reports Allegedly Spread to Europe
Ledger confirmed a hardware implant in a tampered wallet and reports say it spread to Europe. Important supply-chain security news for hardware wallet users.
- 27
Global watchdog flags stablecoin risks, AI threats ahead of G20
The Financial Stability Board warns of cross-border stablecoin risks and AI-related cyber threats ahead of the G20 meeting.
- 28
XRP Ledger defends emergency patch for unlimited XRP bug
The XRP Ledger Foundation says its emergency patch for the unlimited XRP bug was not forced on operators, responding to criticism of the rollout.
- 29
Ledger attack spreads to EU, AI finds ’18 trillion XRP’ bug: Hodler’s Digest
Hodler's Digest covers a Ledger attack reaching Europe and AI researchers finding a major XRP bug that earned only a $250K bounty.
- 30
Trader nets $1.28 million on new 1,000x exchange Papertrade by moving Hyperliquid’s ETH prices
A trader reportedly made $1.28M on the new Papertrade exchange by moving Hyperliquid's ETH price, then lost $450K when 30 shorts were liquidated. A useful look at manipulation and risk on a new venue.