Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT

Binance, OKX and other crypto platforms are warning users to replace exposed wallet credentials and move funds to clean devices.

• A malicious iPhone app called Fomopeek, distributed via the App Store, has been linked to the theft of nearly $580,000 in USDT by exploiting iOS sandbox vulnerabilities to steal private keys and other sensitive data.
• The exploit allowed the app to access private keys, seed phrases, and Keychain data from other applications on the device, prompting warnings from major crypto exchanges like Binance and OKX.
• The incident highlights the risks associated with mobile-based crypto security and has led to recommendations for users to move funds to new wallets on clean devices and update their operating systems.

Topics: Asset types, Legal regulatory, Risk default, Stablecoins digital cash, Enforcement actions litigation, Smart contract vulnerabilities

Tags: #fomopeek #iossandbox #usdt #stolenfunds #privatekeys #malware #cybersecurity #cryptosecurity #binance #okx

Read more

Who pays when Bitcoin disappears without anyone stealing keys?

Crypto insurance sounds reassuring until software fails. Who gets paid, how much, and in Bitcoin or dollars can all differ.

• A software flaw at Liquid allowed the creation of L-BTC without corresponding Bitcoin backing, leading to a loss of nearly 4,000 BTC from its reserve.
• Crypto insurance policies may not guarantee full customer reimbursement, with coverage varying based on the nature of the loss and policy terms.
• The article highlights the complexities of compensation, particularly when payouts are calculated in dollars rather than the original cryptocurrency, and emphasizes the need for clear communication from service providers regarding their financial protection.

Topics: Risk default, Infrastructure providers, Compliance, Smart contract vulnerabilities, Custody security solutions, Aml antimoneylaundering

Tags: #bitcoin #cryptoinsurance #softwarefailure #privatekeys #liquid #lbtc #reimbursement #dollaramount #assetprotection #smartcontracts

Read more

Deutsche Bank планира попечителство на дигитални активи за европейски клиенти

Deutsche Bank планира попечителство на дигитални активи за европейски институционални клиенти Deutsche Bank, най-големият кредитор в Германия, се готви да стартира услуги за съхранение на дигитални активи за институционални клиенти в цяла Европа. Банката

• Deutsche Bank plans to offer digital asset custody services for institutional clients in Europe, including Bitcoin, Ethereum, and select stablecoins.
• The bank intends to self-custody private keys, a move requiring significant infrastructure and regulatory approval.
• This initiative signals a maturing institutional approach to digital assets, pending regulatory clearance and potential adjustments to the service scope.

Topics: Institutional adoption, Jurisdictions, Infrastructure providers, Asset manager initiatives, Established hubs, Custody security solutions

Tags: #deutschebank #digitalassets #custodyservices #europeanclients #bitcoin #ethereum #stablecoins #regulatoryapproval #privatekeys #institutionalclients

Read more

Coinkite’s Coldcard Bug Exposed Single-Sig Risk. Multi-Vendor Multisig Is The New Bitcoin Custody Baseline

Coinkite now forces dice rolls and key-press entropy on new Coldcard seeds. The lasting lesson from the July–August 2026 thefts is not to abandon self-custody — it is to stop generating every key on one vendor.

• A critical entropy bug in Coldcard hardware wallets has led to significant Bitcoin thefts, prompting a shift towards multi-vendor multisignature setups as a new security standard.
• The incident highlights the risks of single-vendor self-custody and emphasizes the importance of a robust threat model, moving beyond single points of failure.
• Multi-vendor multisig, requiring multiple keys from different manufacturers, is now recommended to mitigate risks from single vendor vulnerabilities and enhance overall Bitcoin security.

Topics: Infrastructure providers, Legal regulatory, Scalability, Custody security solutions, Enforcement actions litigation, Market depth liquidity

Tags: #coldcard #multisig #selfcustody #bitcoin #entropybug #multivendormultisig #security #privatekeys #hardwarewallet #threatmodel

Read more

Self Custody Is Dead. Long Live Self Custody

The Coldcard security failure has shaken Bitcoin's confidence in hardware wallets—but abandoning self-custody would mean abandoning the very reason Bitcoin exists. History suggests the lesson isn't to trust custodians again, but to build stronger, more resilient ways to hold our own keys.

• A recent security failure in Coldcard hardware wallets has led to significant Bitcoin theft, prompting concerns about self-custody.
• Despite the hack, the article argues that abandoning self-custody would undermine Bitcoin's core principles, drawing parallels to historical events like the US gold confiscation.
• The author advocates for developing more resilient self-custody solutions, positioning Bitcoin as a superior, digitally engineered alternative to gold and fiat currency.

Topics: Asset types, Legal regulatory, Institutional adoption, Alternative assets, Enforcement actions litigation, Onboarding prime brokerage

Tags: #coldcard #selfcustody #bitcoin #hardwarewallet #privatekeys #hack #securityfailure #custodialexchanges #satoshinakamoto #goldstandard

Read more

What Is an Air-Gapped Bitcoin Wallet? Why the Coldcard Exploit Changes the Conversation About Offline Security

Air-gapped wallets keep private keys completely offline, reducing exposure to hackers—but they're not immune from threats.

• An exploit in Coldcard's firmware has led to significant Bitcoin losses, highlighting that even air-gapped wallets are not immune to security threats.
• The incident underscores the importance of robust hardware, firmware, and random number generation in securing private keys, as human error can still introduce vulnerabilities.
• Security experts advise diversifying crypto holdings to avoid single points of failure and mitigate potential risks associated with any single wallet solution.

Topics: Infrastructure providers, Legal regulatory, Risk default, Custody security solutions, Enforcement actions litigation, Smart contract vulnerabilities

Tags: #airgappedwallet #coldcard #bitcoin #privatekeys #securityexploit #firmwarevulnerability #hardwarewallet #offlinesecurity #cryptolosses #assetsecurity

Read more

Blockaid Flags $8.2M Exploit On Pro Token - H1 Report Indicates Nobody's Safe From Attacks

If you're holding Pro token right now, you already know the feeling: refreshing the chart, refreshing X, waiting for the team to say literally anything.

• An exploit targeting the Pro token has resulted in an estimated $8.2 million loss in USDT, with the project team remaining silent.
• The first half of 2026 has seen a record number of security incidents and losses, with operational security failures being the primary cause, not smart contract bugs.
• North Korea-linked actors are attributed to over half of the losses, employing sophisticated, long-term infiltration tactics, highlighting a critical need for robust operational security beyond code audits.

Topics: Legal regulatory, Scalability, Risk default, Enforcement actions litigation, Growth metrics, Smart contract vulnerabilities

Tags: #blockaid #protoken #exploit #usdt #onchainsecurity #operationalsecurity #northkorea #cryptotheft #smartcontractbug #privatekeys

Read more

BNB Chain Releases MiCA Migration Plan for EU Crypto Users

BNB Chain released a MiCA migration guide as EU rules take effect, while Binance says affected assets remain held 1:1.

• BNB Chain has released a MiCA migration guide for EU crypto users as the new EU regulation takes full effect on July 1, 2026.
• The guide encourages users to move assets from centralized exchanges to self-custody wallets on BNB Chain, providing direct control over funds.
• Binance assures affected users that their assets remain safe and held 1:1, while directly communicating next steps and working with regulators.

Topics: Legal regulatory, Jurisdictions, Blockchain usage, Securities law classification, Regulatory sandboxes pilots, Ethereum evm l 1 s

Tags: #mica #bnbchain #binance #eucryptousers #selfcustody #migrationguide #regulatorychanges #assetmanagement #privatekeys

Read more

Claimant Seeks Control of Satoshi Nakamoto’s Alleged Dormant Bitcoin Fortune

A New York State Supreme Court lawsuit is testing the limits of digital asset law after a pseudonymous plaintiff sought legal ownership of approximately 3.8 million Bitcoin.

• A lawsuit in New York seeks legal ownership of approximately 3.8 million Bitcoin, allegedly held in dormant wallets, potentially worth $293 billion.
• Plaintiffs argue the Bitcoin constitutes abandoned property under New York law, but critics question the legal basis, especially regarding private key ownership and Satoshi Nakamoto's wallets.
• The case could set a precedent for defining ownership and abandonment of digital assets, though enforcement faces significant practical hurdles.

Topics: Legal regulatory, Asset types, Jurisdictions, Securities law classification, Alternative assets, Established hubs

Tags: #satoshinakamoto #dormantbitcoin #newyorkstatesupremecourt #abandonedproperty #privatekeys #legalownership #digitalassetlaw #patoshipattern #assetbackedtoken

Read more

Kraken Brings On-Chain Token Trading Into the Main App for US Users

Kraken now offers on-chain trading for 2,500+ Solana tokens directly inside the app for US users and 100+ countries through a self-custodial wallet.

• Kraken has integrated on-chain token trading for Solana tokens directly into its app for US users and over 100 other countries, allowing access to over 2,500 tokens not typically found on centralized exchanges.
• The feature utilizes Privy's embedded wallet technology and Solana DEX infrastructure, offering users a familiar app experience without requiring separate wallets or seed phrases, while maintaining self-custody of assets.
• This move by Kraken aims to bridge the gap between centralized exchange convenience and decentralized exchange asset access, potentially reshaping how early-stage tokens reach retail audiences and intensifying competition among major exchanges.

Topics: Blockchain usage, Institutional adoption, Integration with defi, Non evm chains, Onboarding prime brokerage, Liquidity pools amms

Tags: #kraken #solana #onchaintrading #dex #embeddedwallet #selfcustodial #ususers #tokentrading #defi #privatekeys

Read more