Coinkite, the maker of the Coldcard Bitcoin {hardware} pockets, launched new normal firmware on Aug. 20 that forces customers so as to add bodily randomness every time they generate a seed. Owners who generate a seed after putting in the present fastened launch can use the hardened course of. Owners still counting on a seed…
Ethereum’s higher.codes contest now measures a cryptographic proof gap that researchers can assault from each side. At 15:44:47 UTC on Aug. 21, the dwell leaderboard confirmed a 63.99-bit decrease certificates and a 116.13-bit higher certificates for koalaIRS12. The two outcomes left 52.14 bits unresolved after 9 promoted submissions from seven solvers. KoalaIRS12 is a fixed…
Ethereum’s shortcut to smart wallet habits arrived with a new belief drawback: a wallet could make an everyday deal with programmable with out transferring the person’s property, whereas the delegated code good points energy to behave with that account’s authority. A peer-reviewed examine launched for USENIX Security ’26 discovered that attacker-linked contracts had been related…
Israel’s largest regulated cryptocurrency dealer, Bits of Gold, is investigating a data breach that probably uncovered the non-public info of as much as 250,000 clients. While buyer funds and digital belongings stay safe, the incident prompted Israeli retail and vitality large Paz to briefly halt Bitcoin purchases on its Yellow comfort retailer app. In an…
SafePal has develop into the most recent hardware-wallet provider to endure a safety incident after an authorization flaw uncovered private info from about 40,000 customers. The Aug. 16 disclosure extends a run of safety issues involving hardware-wallet firms and their customers, together with latest incidents affecting Trezor, Ledger and Coldcard. Two SafePal failures turned an…
A research introduced at USENIX Security ’26 recognized 65,340 risky crypto addresses concerned in misuse throughout Ethereum and BNB Smart Chain, with 126,982.94 ETH and 17,726.7 BNB in related native-token losses. The researchers valued losses related to these risky crypto addresses at greater than $574.8 million. But the 2 newly described lively assault vectors immediately…
Harmony, the layer-1 blockchain community, has launched an emergency validator patch that it says prevents additional unauthorized minting of ONE, its native token. The venture stated it is going to tackle tokens already created in a later replace, leaving their quantity and supreme remedy unresolved. Harmony told validators to install v2026.1.1 on Aug. 12. The…
Block’s Bitcoin Engineering and Security staff and impartial Bitcoin Core builders have traced the latest batch of Coinkite Coldcard pockets losses to a particular firmware defect that uncovered a hidden weak spot in Bitcoin self-custody earlier than any consumer touched a seed phrase. The bug diverted the device’s random-number technology from its STM32 {hardware} supply…
Some Coldcard Mk3 homeowners may have to maneuver their Bitcoin. Coinkite says funds tied to seeds generated on firmware 4.0.1 or a later Mk3 launch could also be in danger. Bitcoin Core contributor instagibbs mentioned he recreated the susceptible seed on a newly initialized Mk3. Coinkite says Mk4 and Mk5 gadgets are additionally affected earlier…
Apple’s tightly managed App Store is dealing with renewed scrutiny after three Bitcoin holders alleged they misplaced $1.8 million to a fake crypto wallet, including to a rising checklist of malicious wallet apps that have reached customers regardless of the corporate’s screening course of. The lawsuit, filed July 24 in California, accuses Apple of failing…