# Self-Custody Articoli collegati

Il Centro Notizie HTX fornisce gli articoli più recenti e le analisi più approfondite su "Self-Custody", coprendo tendenze di mercato, aggiornamenti sui progetti, sviluppi tecnologici e politiche normative nel settore crypto.

Hackers Stole Over 1700 BTC from Vulnerable Coldcard Wallets

Hackers stole over 1,778.84 BTC (worth $112.7 million) from vulnerable Coldcard hardware wallets. The attack, which began on July 30, 2026, exploited a years-old firmware bug introduced in 2021 by manufacturer Coinkite. The flaw created insufficient cryptographic entropy, allowing attackers to systematically reproduce private keys and drain funds from more than 8,600 addresses. Galaxy Research confirmed that while new victims continued to report losses, the last confirmed theft occurred on August 6, likely because most vulnerable funds had already been stolen or moved. The majority of the stolen BTC remains under hacker control, with funds being laundered through methods like CoinJoin and Peel Chain transactions. This incident struck users dedicated to self-custody, shaking confidence in hardware wallets as a secure storage method. In response, interest in multisignature wallets spiked, as no confirmed thefts involved multisig addresses. Galaxy also noted that attackers likely used unrestricted AI models to aid the exploit, highlighting a growing cybersecurity risk where powerful AI tools are more accessible to malicious actors than to defenders.

cryptonews.ru17 h fa

Hackers Stole Over 1700 BTC from Vulnerable Coldcard Wallets

cryptonews.ru17 h fa

Ether.fi Launches Next-Gen Neobanking Services

Ether.fi, a leading crypto neobank, has announced its summer release, introducing a new generation of its fintech product. This update aims to replace traditional banking by offering tools for savings, earning, trading, lending, and seamless spending. The platform leverages decentralized systems to go beyond traditional finance, incorporating the latest trends like trading tokenized stocks, metals, and active crypto assets. The user app will integrate the Aave platform for lending and borrowing, and will add over 30 new fiat currencies and payment methods including Cash App and Apple Pay. According to CEO Mike Silagadze, the goal is to bridge DeFi with everyday financial needs, providing tools once reserved for institutions. The simplified app requires no special crypto knowledge and aims for a broader audience, moving beyond high-risk trading to offer balanced, secure asset management. As of August 2026, Ether.fi holds $3.5 billion in assets. The update introduces features like integration with xStocks for tokenized equity trading, self-custody benefits, lower fees, and a rewards program. It will also offer crypto-backed loans at rates around 4% and a cash-back card. Part of the revenue from new products will fund buybacks of the $ETHFI token, which traded around $0.38 in mid-August. The new features are available immediately to all users, though some services like tokenized asset trading may be restricted in regions like the US.

cryptonews.ru2 giorni fa 15:53

Ether.fi Launches Next-Gen Neobanking Services

cryptonews.ru2 giorni fa 15:53

Cold Wallet Attack Sparks Self-Custody Concerns, Funds Flow to Institutional Products, Bitcoin ETF Weekly Inflows Hit 4-Month High

The security breach of a cold wallet has raised concerns about self-custody in the cryptocurrency market, leading to a shift of funds toward regulated institutional products. Last week, U.S.-listed bitcoin ETFs saw over $850 million in inflows, the strongest weekly performance since April. This surge was triggered by a hack targeting Coinkite's Coldcard wallets, resulting in the theft of approximately $130 million in bitcoin. Analysts suggest the incident may make bitcoin spot ETFs more attractive to some investors, including long-term holders. Notably, this ETF inflow occurred without a significant rebound in bitcoin's price, which has been range-bound and down roughly 50% from its all-time high. The event challenges the traditional perception of cold wallets as the safest storage method. Experts observe a structural shift as "marginal bitcoin is migrating from self-custody to institutionalized products." While ETFs offer bitcoin price exposure without the need for self-custody, they do not eliminate risk entirely, as custodians can also be vulnerable. However, the regulated framework of ETFs provides a different level of oversight and security measures compared to individual self-custody, potentially boosting investor confidence in delegating exposure to large financial institutions.

华尔街日报08/10 20:21

Cold Wallet Attack Sparks Self-Custody Concerns, Funds Flow to Institutional Products, Bitcoin ETF Weekly Inflows Hit 4-Month High

华尔街日报08/10 20:21

When POAP Also Reaches Its End: The Crypto Industry's 'Closure Wave' Hits, How Should Ordinary Users Cope?

The crypto industry is currently experiencing a wave of project shutdowns and closures. Notable examples include long-standing entities like the BitMEX exchange and the POAP (Proof of Attendance Protocol) project. This trend highlights a key shift: beyond major hacks or scams, many projects with real users and functional products are failing due to an inability to find sustainable business models. This signifies a structural correction, moving away from growth fueled by speculation and incentives toward projects with genuine, revenue-generating utility. For ordinary users, this "slowdown" presents new risks. The principle of "Not your keys, not your coins" addresses control but not the complete picture of asset safety. Assets in a self-custodied wallet can represent different things: native assets (e.g., ETH), protocol deposit tokens, LP tokens, or bridged/wrapped assets. If the underlying protocol, bridge, or even blockchain shuts down, the ability to redeem or exit these assets can be lost, even with the private key. The article outlines three key considerations for users: 1. **Understanding Exit Rights:** Evaluate if you can withdraw funds directly via smart contracts if a project's front-end shuts down (as with dYdX v3). 2. **Distinguishing Assets from Claims:** Recognize that tokens like renBTC are claims on assets held elsewhere; their value depends on the solvency and operation of the issuing bridge or protocol. 3. **Assessing Network Viability:** If an entire L1/L2 blockchain halts, private keys alone cannot facilitate transactions. To navigate this environment, users are advised to look beyond token prices and monitor: * **Financial Sustainability:** Is there real, non-incentivized demand and protocol revenue? * **Project Activity:** Is development active (GitHub), or is the project only maintained on social media? * **Exit Channels:** Know the exact nature, location (chain, contract), and redemption process for your holdings. In conclusion, while project lifecycles ending is a sign of industry maturation, users must develop a more nuanced understanding of self-custody. It involves not just holding private keys but also critically assessing what an asset truly represents and ensuring a viable path to exit, independent of any single project's continued operation.

marsbit08/10 09:39

When POAP Also Reaches Its End: The Crypto Industry's 'Closure Wave' Hits, How Should Ordinary Users Cope?

marsbit08/10 09:39

US spot Bitcoin ETFs post best week since April with $1B inflows

US spot Bitcoin ETFs recorded their strongest weekly performance since April, attracting approximately $1 billion in net inflows. This surge signals a sharp rebound in investor demand after a period of uneven flows and coincides with renewed focus on cryptocurrency security. Analyst Eric Balchunas noted this as the third-best week since last October, a period he likened to Bitcoin's "silent IPO," where early investors sold to new institutional buyers like ETFs. The rebound follows a major security incident involving the Coldcard hardware wallet, which led to the theft of around $116 million in Bitcoin. Balchunas suggested this event may be strengthening the appeal of ETFs for investors wary of the technical risks associated with self-custody, though he acknowledged this link is not definitively proven. The weekly inflow highlights renewed institutional interest amid ongoing regulatory uncertainty in the digital asset space.

cointelegraph08/08 16:31

US spot Bitcoin ETFs post best week since April with $1B inflows

cointelegraph08/08 16:31

Trezor: Your keys are always held by someone. And that someone should be you.

Following a recent security incident with a competing hardware wallet, this article defends the concept of self-custody and clarifies its core principles. It argues that while the specific vulnerability was serious, it represents a failure of one product, not of hardware wallets or self-custody in general. The piece cautions against overreactions like abandoning self-custody for exchanges or hastily adopting overly complex multi-signature setups for average users. The author's central argument is that someone always holds your Bitcoin keys—the only question is who. Choosing a custodian (like an exchange) shifts the risk to trusting a third party's honesty and solvency, placing you back in the system Bitcoin was designed to escape. With a hardware wallet, you trust only that the device was built correctly—a claim that can be verified due to open-source code and security audits. The stated mission is to make self-custody as simple and intuitive as possible, moving it from a niche for experts to an obvious choice for everyone. The article concludes by emphasizing that self-custody’s inherent responsibility is the very point of true ownership, and that transparency and verification, not blind trust, are what make it stronger.

cryptonews.ru08/08 00:01

Trezor: Your keys are always held by someone. And that someone should be you.

cryptonews.ru08/08 00:01

Carbon Launches TradFi-Native On-Chain Derivatives Venue With 950+ Markets in One Account

Carbon, an on-chain prime broker, has publicly launched trading for its "Carbon TradFi" markets, adding over 250 traditional finance instruments (equities, indices, forex, commodities) to its platform. Each on-chain position is hedged 1:1 at regulated off-chain venues, providing institutional depth from day one. Combined with its existing 530+ crypto perpetuals and 150 round-the-clock real-world asset (RWA) markets, Carbon now offers over 950 tradeable instruments in a single self-custodied account. This structure solves the liquidity cold-start problem for on-chain TradFi by inheriting depth from established markets. Traders can access 24/7 RWA markets or Carbon TradFi markets that track traditional hours. The platform also opened its Carbon Liquidity Provider (CLP) vault, a delta-neutral yield product. Carbon, operating on Arbitrum, has processed over $20B in cumulative volume.

TheNewsCrypto08/07 14:46

Carbon Launches TradFi-Native On-Chain Derivatives Venue With 950+ Markets in One Account

TheNewsCrypto08/07 14:46

Bitcoin 'Red Team' Uncovers 4,962 Vulnerabilities Following Coldcard Hack

A security vulnerability in the Coldcard hardware wallet led to the theft of over 1,800 BTC (worth more than $116 million at the time) from long-term holders, stemming from a firmware bug first identified in March 2021. This incident prompted the formation of the volunteer 'Bitcoin Red Team,' led by developer Calle and Rob Hamilton, CEO of custody insurance firm Anchorwatch. The team conducted an emergency audit of the broader open-source Bitcoin ecosystem. Sixteen security researchers spent 27.5 hours analyzing 390 Bitcoin-related open-source repositories, combining AI-assisted analysis with manual review. They documented a total of 4,962 vulnerabilities, including 85 classified as critical and 635 as high severity. Funding was provided by the non-profit OpenSats. The team described the ecosystem's security state as "extremely poor," though only about one-fifth of the findings have been independently reproduced so far. The highest concentration of critical issues was found in privacy and coinjoin tools, accounting for 24% of critical finds. Cryptographic libraries had the highest absolute number of issues (1,101) but a lower proportion of high-severity ones. Most analyzed projects had few or no critical problems, with the real danger concentrated in a small group of tools handling private key generation, signing, and privacy-preserving transactions—the same category responsible for the original Coldcard failure. The audit is the first phase of an ongoing effort. The next steps involve verifying which vulnerabilities are actually exploitable and coordinating responsible disclosure with affected projects. For the self-custody community, the audit shows white-hat researchers are now scaling their efforts to match the pace of potential attackers.

cryptonews.ru08/07 13:40

Bitcoin 'Red Team' Uncovers 4,962 Vulnerabilities Following Coldcard Hack

cryptonews.ru08/07 13:40

Bitcoiners turn to dice throws as self-custody setups are re-evaluated

Following a critical low-entropy bug in Coldcard hardware wallets linked to thefts starting July 30, Bitcoin holders are reassessing trust in their self-custody setups. The flaw, introduced in a 2021 firmware update, replaced a hardware-based random number generator with a weaker software method, drastically reducing seed phrase entropy and enabling attackers to brute-force private keys, stealing over $100 million. The incident highlights the core Bitcoin principle of "Don't trust, verify." Wallets generated using physical entropy sources, like dice throws, were spared. Methods for generating secure seeds without relying on hardware wallets—such as manual dice rolling with conversion tables, paper shuffling of BIP-39 words, or specialized tools—are now being widely discussed and adopted. The event underscores that verifiable, user-controlled entropy generation is the essential foundation for secure self-custody, moving trust away from opaque electronic components.

cointelegraph08/07 13:11

Bitcoiners turn to dice throws as self-custody setups are re-evaluated

cointelegraph08/07 13:11

Canadian Users Account for 25% of Losses Related to Coldcard Vulnerability

Canadian Bitcoin users suffered the highest losses, accounting for 25% of the total, from a vulnerability affecting the Coldcard hardware wallet, a situation analysts link to the strong local presence of its parent company Coinkite headquartered in Toronto. Australia followed with 15-20% of losses, while the US and Thailand accounted for 10-15%. Though the exploit hit English-speaking and early Bitcoin-adopting regions hardest, global impact was seen across Western Europe, Latin America, and key African crypto hubs. The total stolen assets reached $116 million. Galaxy Research identified a March 2021 firmware update—specifically the faulty implementation of a new random number generator (RNG)—as the single point of failure. A configuration error rendered the hardware RNG inactive, silently defaulting to a weaker software-based one, which generated private keys with low entropy for over five years before an attacker stole $70 million from 1,200 wallets in 41 minutes. In response, security experts urged manufacturers to eliminate backup RNG mechanisms in production and strictly adhere to validation standards like NIST FIPS 140-3. For incident response, immediate user communication and clear mitigation steps were prioritized alongside rigorous patch testing. For users with compromised seed phrases, a strict protocol was recommended: purchase a new reputable hardware wallet, generate a new seed offline, verify it with a test transaction, transfer all funds to the new setup, *then* attempt to update the original device's firmware. Experts also advised diversifying risk by using hardware wallets from different manufacturers to avoid a single point of failure. The incident sparked a fundamental debate about self-custody security models. Critics argue that offline storage alone isn't foolproof, highlighting that trust is always delegated to third parties, like wallet manufacturers. The consensus is shifting towards multi-vendor setups and mandatory baseline standards like multi-signature or Multi-Party Computation (MPC) wallets. The goal is to move from "trusting one device" to ensuring no single compromised component or entity can move funds, distributing trust across independent organizational and technological failure domains.

cryptonews.ru08/06 13:51

Canadian Users Account for 25% of Losses Related to Coldcard Vulnerability

cryptonews.ru08/06 13:51

活动图片

Othersright-arrow

Indepth Researchright-arrow