Bitcoin Core’s new fix closes gap that could redirect funds without stealing keys
Bitcoin Core has added a safeguard against signing transactions that may not bind funds to the payment destination a user approved. The change, merged into Bitcoin Core’s master development branch on Sept. 25, targets a narrow flaw in partially signed…
New Bitcoin upgrade catches hidden key leaks hiding the exact fix
Bitcoin improvement proposal BIP461 could make a hidden route for leaking wallet secrets easier to detect. The draft defines a common signing procedure for ECDSA, an existing Bitcoin signature scheme. Independent compliant signers should produce…
El Salvador targets $9 billion in transfers, but chooses stablecoins
El Salvador is turning to stablecoins for remittances, further separating everyday payments from the country’s pioneering Bitcoin experiment. Sivar, a new national community and payments app developed by Modveon, will use Coinbase infrastructure to…
Dormant whale moves $380M Bitcoin, leaving the sale question unanswered
A Bitcoin address sent 4,499.99987779 BTC to a single destination in a transaction confirmed at 02:30:04 UTC on Sept. 25, 2026. The output was still unspent at a 13:33 UTC check, leaving nearly 4,500 BTC visible at one address after the move. At…
White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility
Coldcard owners can publicly check whether white hats recovered coins from their wallets. Galaxy researcher Alex Thorn linked a Sept. 21 Bitcoin transaction carrying a Crypto Recovery Trust claims reference to roughly 52.37 BTC from Coldcard-related…
Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT
Fomopeek, a malicious iPhone app distributed through Apple’s App Store, has been linked to nearly $580,000 in stolen USDT. Blockchain security firm SlowMist began investigating the app over the weekend after receiving reports of stolen assets linked to…
One wallet links $1.55 million FetchAI theft to massive 408.5 million NTX mint
A coordinated attack drained 8.7 million FET and used a compromised NuNet minter key to create 408.5 million NTX. The Sept. 19 attack emptied the Ethereum-side conversion contract used by SingularityNET’s bridge, removing 8,721,530 FET worth about $1.55…
Cosmos is back online after outage, but Ledger users still can’t see or send their ATOM
Ledger’s status page continued to list Cosmos (ATOM) as a major outage on Sept. 13, leaving users unable to view ATOM balances or transaction history and unable to submit transactions through Ledger Wallet more than four days after the incident…
The biggest vulnerability in your Bitcoin wallet might be the shipping label
Hardware wallets might be able to protect your keys, but the paperwork from buying them could expose your identity. To buy a hardware wallet, you give a company your name and address so it can send you a device designed to put you in control of your…
This XRP project is shutting down after wallet flaw exposed 4,000 accounts and drained $450,000
XRP Healthcare, an healthcare platform build on the XRP Ledger (XRPL), is winding down operations after a wallet flaw exposed thousands of accounts and led to roughly $450,000 in losses. On Sept. 10, the project said the Sept. 3 XRPH Wallet incident…