# Security Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Security", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

Hackers Stole Over 1700 BTC from Vulnerable Coldcard Wallets

Hackers stole over 1,778.84 BTC (worth $112.7 million) from vulnerable Coldcard hardware wallets. The attack, which began on July 30, 2026, exploited a years-old firmware bug introduced in 2021 by manufacturer Coinkite. The flaw created insufficient cryptographic entropy, allowing attackers to systematically reproduce private keys and drain funds from more than 8,600 addresses. Galaxy Research confirmed that while new victims continued to report losses, the last confirmed theft occurred on August 6, likely because most vulnerable funds had already been stolen or moved. The majority of the stolen BTC remains under hacker control, with funds being laundered through methods like CoinJoin and Peel Chain transactions. This incident struck users dedicated to self-custody, shaking confidence in hardware wallets as a secure storage method. In response, interest in multisignature wallets spiked, as no confirmed thefts involved multisig addresses. Galaxy also noted that attackers likely used unrestricted AI models to aid the exploit, highlighting a growing cybersecurity risk where powerful AI tools are more accessible to malicious actors than to defenders.

cryptonews.ru2 days ago 12:34

Hackers Stole Over 1700 BTC from Vulnerable Coldcard Wallets

cryptonews.ru2 days ago 12:34

BSC Confirms Pasteur Hard Fork Release Date at the End of August

BNB Chain has confirmed that the Pasteur hard fork for the BNB Smart Chain (BSC) mainnet will activate at 02:30 UTC on August 25, 2026. Node operators must upgrade to client version 1.7.7 by that time to avoid network disconnection. The hard fork, packaged under the BEP-673 meta-proposal, consolidates three other proposals: BEP-682, BEP-695, and BEP-675. BEP-682 aims to secure cross-chain bridges by fixing a vulnerability where validator signatures in asset transfers could be counted multiple times, allowing a threshold to be met with fewer genuine signatures. The update ensures duplicate signatures are removed before counting. BEP-695 addresses a flaw in staking and governance systems where a validator's old consensus key, after being rotated for maintenance, could retain its administrative privileges. The fix ensures retired keys immediately lose their authority and prevents validators from avoiding slashing through key rotation. BEP-675 aims to increase network throughput. It allows a block proposer to submit a pre-executed block, reducing the time validators spend re-executing transactions. Testnet results showed validator execution time dropped from 125ms to 15ms, and throughput increased by nearly 88% to 2,324 TPS, with average block gas usage rising significantly. Node operators must follow detailed upgrade procedures. Developers using the BEP-675 scheme may need to run a full node instead of a light client, as they are now responsible for creating fully executed blocks.

cryptonews.ru08/14 19:26

BSC Confirms Pasteur Hard Fork Release Date at the End of August

cryptonews.ru08/14 19:26

Crypto Biz: Bitcoin’s $116M self-custody wake-up call

A $116 million Bitcoin hardware wallet exploit has reignited debate over the risks of self-custody versus institutional products. This coincides with U.S. spot Bitcoin ETFs seeing their strongest weekly inflows since April, leading analysts to speculate security fears may drive investors toward ETFs. MicroStrategy CEO Phong Le announced the company will resume its Bitcoin accumulation strategy later this year, despite recent sales to meet shareholder obligations. The firm remains the largest institutional Bitcoin holder. Bitcoin miner Riot Platforms is reportedly transforming part of its infrastructure into a $9 billion, 20-year power supply deal with AI company Anthropic, highlighting a growing trend of miners pivoting to AI. Finally, Trump Media plans to revamp its crypto treasury strategy after reporting a $238 million Q2 loss, partly due to unrealized losses on its Bitcoin holdings. The company has increased its Bitcoin position but warned of counterparty risks in its earning activities.

cointelegraph08/14 15:41

Crypto Biz: Bitcoin’s $116M self-custody wake-up call

cointelegraph08/14 15:41

To Counter Quantum Threat, Ethereum Abandons Poseidon and Switches to Traditional Hashes

On August 13th, Ethereum researcher Justin Drake announced a strategic pivot in the face of the quantum computing threat: the Ethereum Foundation will abandon the SNARK-friendly hash function Poseidon at the L1 level in favor of traditional hash functions like SHA2 or BLAKE2. This decision, informed by eight years of research, represents a major shift in Ethereum's post-quantum cryptography roadmap. Poseidon, introduced in 2019, has been favored for zkRollups and zkVMs due to its efficiency within SNARK circuits. However, its shorter cryptographic history and analysis timeline became liabilities when post-quantum security became a critical requirement. The change is enabled by breakthroughs in SNARK design, particularly the adoption of "binary field" arithmetic. This allows traditional hash functions (which rely heavily on bitwise operations) to be verified efficiently in SNARKs, with recent benchmarks achieving millions of hashes per second on a laptop. Another key driver is the accelerating timeline of the quantum threat. Reports warn that "Cryptographically Relevant Quantum Computers" (CRQCs) could break current public-key cryptography (like ECDSA) as early as the 2030s, risking trillions in on-chain assets. The enhanced cryptanalysis capabilities of AI have also weakened some post-quantum candidates, pushing Ethereum towards hash-based schemes, deemed more quantum-resistant. Ethereum's post-quantum deployment plan aims for a production-ready leanVM by 2027, followed by full deployment across the consensus, execution, and data availability layers by 2028. This leanVM will aggregate numerous large post-quantum signatures into a single compact proof per block. Other major blockchains are also preparing. Solana's core developers have independently chosen the NIST-standardized Falcon signature scheme for their post-quantum roadmap. Starknet has outlined a multi-phase plan, starting with replacing its Pedersen hash with BLAKE2. By moving from the specialized Poseidon to the battle-tested SHA2/BLAKE2, Ethereum is opting for mature, widely analyzed cryptographic primitives, prioritizing long-term security assurance in the quantum era.

marsbit08/14 06:38

To Counter Quantum Threat, Ethereum Abandons Poseidon and Switches to Traditional Hashes

marsbit08/14 06:38

Trezor Customer Data Leak: Coins Are Safe, But Phishing Is Inevitable

Trezor, a hardware cryptocurrency wallet manufacturer, reported a data breach at its logistics partner, ShipMonk, affecting around 13,689 customers. The incident, confirmed on August 13, 2026, involved unauthorized access to ShipMonk's systems, which stored order information from May 10 to August 8, 2026. Trezor's own systems and user crypto assets were not compromised. The leaked data varies: for 11,742 customers, full names, email addresses, phone numbers, and delivery addresses were exposed. For 1,947 others, only name, city, and email were leaked. The breach was limited to customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal. Trezor warns affected users of an increased risk of phishing attacks, where malicious actors may use the stolen contact details to impersonate Trezor, banks, or exchanges to steal wallet recovery phrases. All impacted customers have been notified via email. In response, Trezor announced a planned "Anonymous Delivery" feature for the EU (September 2026) and the US (end of 2026), aiming to anonymize logistics data. ShipMonk has not yet issued a public statement on its official website. The analysis highlights this as a recurring industry pattern where third-party logistics vendors become weak links in the supply chain, storing data longer than necessary. Similar incidents, like the 2020 Ledger breach, led to prolonged phishing campaigns. A key question remains whether hardware wallets can ever fully decouple from external logistics risks.

cryptonews.ru08/13 21:26

Trezor Customer Data Leak: Coins Are Safe, But Phishing Is Inevitable

cryptonews.ru08/13 21:26

Cryptomarket Loses $14 Billion Due to Hacks. What Was Special About 2026?

The cryptocurrency market lost over $14 billion due to hacks and code exploits from 2016 to 2026, according to a CoinGecko report. The year 2026 has seen a significant spike, with 164 separate incidents recorded as of August—a 70% increase from all of 2025. Although the total financial loss for 2026 currently stands at about $1.2 billion, still below the peak of $2.77 billion in 2022, the number of attacks is unprecedented. Analysts attribute this rise to improved tracking methods and increased malicious activity, possibly fueled by advancements in artificial intelligence. Notable 2026 breaches include the April hacks of Drift and Kelp protocols, resulting in losses of $295 million and $293 million, respectively. The Kelp exploit, linked to North Korean hackers, involved minting unbacked tokens via a LayerZero bridge vulnerability, which were then used as collateral on Aave. This triggered a massive withdrawal of liquidity from Aave and the broader DeFi sector, leading to over $20 billion in sector-wide outflows by August, despite the eventual recovery of the stolen Kelp funds. The report also highlights that market reactions to hacks often inflict greater financial damage than the exploits themselves. For instance, following the BonkDAO hack, the token's market cap fell by nearly $140 million, far exceeding the $21 million direct loss. Other examples include the DRIFT token dropping 80% and Step Finance's token losing over 99% of its value, leading to the protocol's bankruptcy. The analysis notes that the real total damage is likely higher, as it excludes individual wallet breaches and broader ecosystem losses.

cryptonews.ru08/13 20:31

Cryptomarket Loses $14 Billion Due to Hacks. What Was Special About 2026?

cryptonews.ru08/13 20:31

Panic at One of the Most Popular Cryptocurrency Wallets: Some Users May Be in Danger

Hardware wallet manufacturer Trezor announced a data breach at a third-party logistics provider, exposing order information for thousands of customers. The incident affected a portion of new customers who received orders within 90 days before August 8, 2026, primarily in countries including the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal. Data for over 13,000 customers was compromised, with 11,742 fully exposed and 1,947 partially exposed. The leaked information includes customer names, delivery addresses, phone numbers, and email addresses. Trezor emphasized that its own systems, hardware wallets, and sensitive user data providing access to crypto assets were not affected. The breach was limited due to a 90-day data retention policy, and all affected customers have been individually notified. However, the exposed personal data could enable more convincing and targeted phishing attacks. Trezor strongly urged users to remain highly vigilant against suspicious messages claiming to be from the company or other crypto services. The company specifically warned users never to enter wallet recovery seeds or passphrases on any website or share them with anyone.

cryptonews.ru08/13 17:06

Panic at One of the Most Popular Cryptocurrency Wallets: Some Users May Be in Danger

cryptonews.ru08/13 17:06

Trezor Announces Data Leak of Over 13,000 Customers Due to ShipMonk Hack

Trezor has reported a data breach affecting 13,689 of its customers due to a hack of its logistics partner, ShipMonk. The incident impacted customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received orders in the 90 days prior to August 8th. Trezor emphasized its own systems and devices were not compromised, but the leaked data could facilitate more sophisticated phishing attacks against affected users. Full data for 11,742 customers was exposed, including name, email, phone number, and delivery address. Partial data (name, city, and email) for 1,947 others was also accessed. ShipMonk stored the delivery information, and Trezor noted the incident was limited by ShipMonk's policy to delete or anonymize order data 90 days after delivery. This is Trezor's first breach since 2013 involving customer phone numbers and physical addresses. Private keys, wallet backups, and devices remain secure. All affected customers have been notified. Trezor is investigating with ShipMonk, which has secured the affected systems. In response, Trezor announced plans for an anonymous delivery feature in the EU by September 2026 and in the US by year-end, aiming to minimize personal data collection through pseudonyms, automated pickup points, and post-delivery data deletion.

cryptonews.ru08/13 16:21

Trezor Announces Data Leak of Over 13,000 Customers Due to ShipMonk Hack

cryptonews.ru08/13 16:21

Unknown Crypto Investor Loses Over $25 Million in 15 Minutes

According to Scam Sniffer, a crypto investor fell victim to a targeted phishing attack, losing over $25 million in just 15 minutes. The stolen assets included $6.3 million in wrapped bitcoins (aWBTC), $5.1 million in DAI stablecoins, $4.7 million in Wrapped Bitcoin tokens, and $2.6 million in Ether. Following the theft, the attackers converted the stolen crypto via decentralized exchanges into 20 million DAI and 3,000 ETH, distributing the funds across four crypto addresses where they currently remain inactive. This is not the first time this specific investor has been targeted; in September 2023, he lost $24.23 million after approving a transaction on a phishing site linked to the hacker group Inferno Drainer, though approximately 90% of those funds were later returned. Separately, Scam Sniffer reported another incident where a crypto investor lost 999,999 USDT after signing a malicious transaction granting a scammer's smart contract unlimited withdrawal rights to their USDT holdings.

cryptonews.ru08/13 12:09

Unknown Crypto Investor Loses Over $25 Million in 15 Minutes

cryptonews.ru08/13 12:09

Boltz Creators Hand Over Project to 'Bitcoin Veterans' Group After AI Hacker Attacks

The non-custodial Bitcoin swap service Boltz announced its founding team is stepping down following a series of increasingly sophisticated attacks, which they suspect were conducted with AI assistance. While user funds remained safe due to the platform's non-custodial nature, the attacks resulted in losses for the service itself. Facing unsustainable pressure, the small five-person team halted operations on August 3rd and has transferred the project to an unnamed group of "Bitcoin veterans" who will provide capital and engineering resources to fix vulnerabilities and eventually restart the service. All original founders have left the company. Concurrently, the Bitcoin Policy Institute (BPI) and major crypto firms like Coinbase and Kraken issued a call to leading AI developers. They argue that the rapid advancement of AI is tipping the balance in favor of attackers, who can use powerful models to find code vulnerabilities. To counter this, they propose creating trusted access programs for open-source Bitcoin and critical financial infrastructure developers, granting them controlled access to top-tier AI security tools to level the playing field.

cryptonews.ru08/13 11:59

Boltz Creators Hand Over Project to 'Bitcoin Veterans' Group After AI Hacker Attacks