Wallets
Every Wallets read CryptoBloggers has picked: 179 so far, 127 in the last 30 days, strongest first under “Start here” and newest first below.
Start here
- 1
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Ledger reports an unauthorized hardware implant in a wallet sold by CryptoBilis, linked to reports of fund theft.
- 2
Ledger says unauthorized implant found in at least one device sold by CryptoBilis
Ledger confirmed an unauthorized hardware implant in at least one device sold by reseller CryptoBilis, linked to crypto losses; it says its own systems are unaffected.
- 3
Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Ledger reports a hidden LTE chip that reads 24-word recovery phrases off the screen during setup, tied to a suspected $86M drain; a major hardware wallet security finding.
- 4
Ledger Says Unauthorized Component in CryptoBilis Wallets Leaked Recovery Phrases Over Cellular
Ledger says an unauthorized cellular component in CryptoBilis wallets from a Southeast Asian reseller leaked recovery phrases, and all confirmed drains involve CryptoBilis-sold signers.
- 5
Ledger Confirms Hardware Implant as Tampered Wallet Reports Allegedly Spread to Europe
Ledger confirmed a hardware implant in a tampered wallet and reports say it spread to Europe. Important supply-chain security news for hardware wallet users.
Names that keep coming up
Wallets picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Wallets card
newest first · page 1 of 6- 1
Coinbase Wins Final OCC Clearance for US Trust Company
Coinbase receives final OCC clearance for a US trust company charter, giving its custody business a federal framework but not a bank charter.
- 2
BitGo Denies Breach as Unocoin Probes Wallet Transfers
BitGo denies a breach while Unocoin probes wallet transfers signed with Unocoin-held keys, suspecting misuse of a backup mechanism.
- 3
Unocoin keeps deposits and withdrawals halted over suspect transfers
Unocoin halted deposits and withdrawals after transfers were reportedly signed outside BitGo's platform, possibly via a wallet recovery feature.
- 4
Trezor Confirms Three Devices Were Tampered With, Released a Firmware Update, and Cut its Reseller Network by 80%. No known successful thefts for far.
Trezor confirmed three devices were tampered with, shipped a firmware update, and cut its reseller network by 80%, with no known successful thefts so far.
- 5
Unocoin Says One of Its BitGo Addresses Sent Out Transactions It Can’t Trace
Unocoin says one of its BitGo addresses sent transactions it cannot trace, after it suspended services following unauthorized activity.
- 6
Trezor cuts reseller network by 80% after finding more spy implants
Trezor cut its reseller network by 80% after finding more spy implants in devices, tightening wallet supply-chain security.
- 7
Exodus’ ‘cost reset is real’ as payments offset crypto wallet slowdown, StoneX says
Exodus Q3 payments revenue reached $10.9M as the wallet business slowed and staff were cut.
- 8
Foundation CEO Says Ethereum Foundation Is Launching a Signing App for Passport Prime
Ethereum Foundation is collaborating on a signing app for Passport Prime hardware wallet; no public release yet.
- 9
Suiet wallet to shut down in latest exit from Sui ecosystem
Suiet, a self-custodial Sui wallet, is shutting down with API services running through Nov. 14, as Sui DeFi TVL fell over 22% in a month.
- 10
Ledger’s SDK snitched users’ transaction data and device info
A code review shows Ledger's SDK sends signing details and transaction metadata to Ledger servers, a privacy and trust issue for wallet users.
- 11
Ledger’s Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Ambire Developer Says
Ledger's developer kit reports every signature to Ledger unless wallets opt out, a privacy issue wallet users should know about.
- 12
iOS 27.2.1 Leaves Sandbox Flaw Open, Researcher Says
SlowMist says an iOS 27.2.1 sandbox flaw could expose plaintext wallet data; Trust Wallet and Zerion say their users are not affected.
- 13
Kimber Digital Securities gains broker-dealer status for tokenized assets
Kimber Digital Securities got broker-dealer status to offer tokenized US stocks, ETFs and bonds via self-custodial wallets.
- 14
MetaMask Adds Mobile Limit Orders Across Four Chains
MetaMask adds mobile limit orders on four chains using revocable permissions and a 3% default tolerance, with no guaranteed fill at target price.
- 15
Binance Warns iOS Flaw Could Expose Wallet Seed Phrases as Apple’s Latest iPhone Patch Stays Silent
Binance warns of an unpatched iOS sandbox escape that could expose wallet seed phrases to other apps, a security alert wallet users should see.
- 16
Ledger SDK Sends Signing Metadata by Default
A Ledger SDK sent signing metadata including addresses and device details by default; a security issue for wallet users.
- 17
Consumer Protection Tuesday: Announcing Security Checkup - your account's security score
Coinbase launches an account security score feature for users, a product announcement of modest interest.
- 18
Binance Tells iPhone Users to Delete Sideloaded Apps Over iOS Exploit
Binance warns iPhone users to delete sideloaded apps because an iOS exploit could expose seed phrases and keys.
- 19
Malicious Pull Requests Target Vizor and Zingo Wallets
Malicious pull requests targeted Vizor and Zingo wallet repos with instructions to make AI reviewers ignore secret uploads; none merged, a useful supply-chain security warning.
- 20
Onramp Launches Business Bitcoin Accounts With Two-Person Withdrawal Approvals as Wrench Attacks Climb
Onramp launched business bitcoin accounts with two-person withdrawal approvals, a response to rising wrench attacks.
- 21
Binance warns iOS flaw could expose crypto wallet keys
Binance warns of an iOS flaw that could expose iPhone wallet keys, and it is unclear whether Apple's latest updates fix it.
- 22
A vulnerability affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
- 23
The crypto wallet that grew up inside Telegram is striking out on its own
Telegram-born crypto wallet Walt is spinning out as a standalone app offering trading, tokenized U.S. stocks and perpetual futures.
- 24
SlowMist Flags iOS Sandbox Escape Risk to Wallet Data
SlowMist warns that iOS sandbox escape flaws could expose plaintext secrets stored locally in wallet apps.
- 25
Luke Dashjr Publishes Nine Coldcard RNG Concerns
Luke Dashjr raises nine concerns about Coldcard RNG, with firmware changes that add seed-error checks and a startup RNG test.
- 26
Durov Says 700,000-Plus Wallets Were Created on Telegram in 48 Hours
Durov says over 700,000 Telegram wallets were created in 48 hours, though the count includes wallets with no onchain activity.
- 27
How fake randomness stole $130m in Bitcoin
A clear layman explainer of how weak randomness in the Coldcard seed generation enabled a roughly $130m Bitcoin theft, with lessons for self-custody.
- 28
SlowMist Flags 'Cracked TradingView Premium' as Wallet-Data Malware
SlowMist warns of a cracked TradingView Premium lure carrying wallet-data malware; no confirmed thefts or victim count yet.
- 29
Keplr Confirms Web3Auth Recovery Addresses After Wallet Breach
Keplr confirmed recovery addresses tied to a Web3Auth wallet breach, including a six-account Cosmos Hub batch that tokenized 2,265 staked ATOM.
- 30
Cosmos Batch Moves 2,266 Staked ATOM From Six Accounts
A batch move of 2,266 staked ATOM from six accounts drew theft reports, while Web3Auth says some apparent drains are protective recovery transfers.