Tag: self-custody

  • Coldcard Firmware Flaw Exposes $130M in Bitcoin: What Hardware Wallet Users Must Know Now

    Coldcard Firmware Flaw Exposes $130M in Bitcoin: What Hardware Wallet Users Must Know Now

    A series of hacks targeting Coldcard hardware wallets has reignited concerns about cryptocurrency self-custody, proving that even offline devices can fall prey to software vulnerabilities. According to blockchain security firms, hackers stole an estimated 1,596 BTC (worth roughly $130 million) from around 7,300 affected addresses, marking one of the largest hardware wallet security incidents in recent years.

    The exploit does not mean Bitcoin’s cryptography has been compromised. Instead, researchers say attackers exploited a weakness in certain Coldcard firmware versions that produced insufficient randomness when generating seed phrases, making them predictable.

    Firmware Vulnerability Enabled Seed Phrase Prediction

    Hardware wallets are widely regarded as one of the safest ways to store digital assets because private keys remain offline. However, security researchers at Block discovered that some Coldcard devices generated seed phrases using weak entropy. This allowed attackers to reconstruct private keys through brute-force methods.

    Blockchain analytics firm K33 reported that the attacks triggered an unusual spike in on-chain activity: approximately 890,000 BTC moved across the Bitcoin network over the past week—the highest weekly total recorded this year. K33 noted, “Therefore, the recent acceleration in BTC transaction activity is very likely driven by the Coldcard attacks.”

    Victims believed they followed industry best practices. One affected user, Jonathan Goodman, who lost $1.6 million, wrote on X, “I never shared my seed phrase with anybody. My devices never touched the internet.” He added that the vulnerability originated from “one line in their code from 2021.”

    What the Incident Means for Hardware Wallet Users

    The vulnerability is specific to certain Coldcard wallet implementations and does not compromise Bitcoin itself—only the wallet implementation. So far, no evidence suggests that hardware wallets from manufacturers like Ledger, Trezor, BitBox, Foundation, Cypherock, or KeepKey share the same flaw.

    After the announcement, Coinkite (Coldcard’s manufacturer) recommended that affected users immediately upgrade their firmware and create a new wallet using a fresh seed phrase. Restoring the old recovery phrase would not eliminate the susceptibility.

    The incident has also brought multi-signature (multisig) wallets back into focus. Multisig setups require approvals from several devices before funds can be transferred, greatly mitigating the risk if any single device is compromised.

    Why This Matters

    The Coldcard exploit proves hardware wallets are not foolproof. Flawed seed phrase generation exposed offline funds, highlighting that true crypto security requires constant firmware updates, multi-signature setups, and multi-layered protection rather than relying on a single device.

    Final Thoughts

    TRM Labs reports that the crypto sector has experienced over 200 hacks so far in 2026, totaling more than $950 million in losses. The Coldcard event underscores that hardware wallets remain one of the most secure storage solutions available, but security is a matter of layers: keeping firmware updated, using strong seed phrases, spreading assets, and monitoring security advisories. Ultimately, this attack serves as a stark reminder to long-term Bitcoin investors that cybersecurity is not a one-time setup, but an ongoing journey.

    Frequently Asked Questions

    1. What caused the Coldcard hardware wallet hack? The attack stemmed from a firmware vulnerability that generated predictable seed phrases due to insufficient randomness. This allowed attackers to reconstruct private keys without breaking Bitcoin’s underlying cryptography.
    2. Does this mean all hardware wallets are unsafe? No. The vulnerability appears specific to certain Coldcard firmware versions. There is currently no evidence that major brands like Ledger, Trezor, BitBox, Foundation, Cypherock, or KeepKey are affected by the same flaw.
    3. What should affected Coldcard users do immediately? Update the device to the latest firmware, generate a completely new wallet with a fresh seed phrase, and transfer Bitcoin to the new wallet. Simply restoring the old seed phrase does not eliminate the vulnerability.
    4. What is a multisignature (multisig) wallet, and why is it safer? A multisig wallet requires approvals from two or more devices or private keys before funds can be transferred. This significantly reduces theft risk because compromising one wallet is insufficient to access assets.
    5. What lessons can Bitcoin holders learn from the Coldcard incident? This attack highlights that hardware wallets remain highly secure but should not be the only layer of protection. Keeping firmware updated, securely backing up seed phrases, following official security advisories, and considering diversified custody or multisig setups can greatly improve long-term security.
  • Bitcoin Holds Near $62,738 Amid Coldcard Wallet Exploit and Stalled CLARITY Act

    Bitcoin Holds Near $62,738 Amid Coldcard Wallet Exploit and Stalled CLARITY Act

    Bitcoin traded near $62,738 on Monday, up 1.04% in the last 24 hours, as a Coldcard wallet exploit that drained tens of millions from cold storage addresses renewed custody fears. Analysts identified $63,700 as a key resistance level, while the stalled CLARITY Act kept sentiment guarded.

    Key highlights include:

    • Hyperliquid led major gainers with a 13.16% weekly rise, outpacing the broader altcoin market.
    • The CLARITY Act remains stalled ahead of the Senate recess, while Bitcoin ETFs posted mixed weekly flows.
    • Bitcoin’s market cap stands near $1.25 trillion, with 24-hour trading volume reaching $15.68 billion.

    Bitcoin Price Today

    Bitcoin traded at $62,738.34, up 1.04% over the past 24 hours, according to CoinMarketCap data. Price action remains tied to custody-security concerns and the stalled CLARITY Act.

    BTC Holds $63K Despite Coldcard Exploit Fears

    CoinSwitch Markets Desk reported that BTC stayed steady near $63,000 despite an estimated $88.6 million Coldcard wallet exploit. The incident renewed talk around self-custody security. Geopolitical tensions between the US and Iran kept traders cautious. Price briefly touched $63,500 before consolidating. Buyers defended the $63,000 zone through the session. A move beyond $63,500 could add fresh momentum, while $62,800 stays key support.

    July Closes With a Strong Gain, August Stays Seasonally Weak

    Akshat Siddhant, Lead Quant Analyst at Mudrex, noted that Bitcoin ended July with a gain above 7.3%, reversing two straight months of losses. US spot Bitcoin ETFs returned to net inflows in July, reaching $172.4 million for the month. Selling pressure near month-end has left investors cautious. August has historically been Bitcoin’s weakest month on record. Whale wallets still accumulated over 40,100 BTC during this stretch. Bitcoin must reclaim $65,000 to strengthen broader sentiment.

    Lower Oil Prices Ease Inflation Worry, ETF Flows Stay Choppy

    Vikram Subburaj, CEO of Giottus, placed Bitcoin near $63,125, up 0.3%. Lower oil prices have eased some inflation concerns this week. Inconsistent ETF flows and thin spot activity cap the recovery. Bitcoin holds support near $62,900, with resistance near $64,000. Large-cap altcoins traded modestly higher. Ethereum, BNB, XRP, and Solana all posted small gains. Markets now watch the August 7 employment report closely.

    Tight Ranges Persist as Yields and a Firm Dollar Cap Risk Appetite

    Riya Sehgal, Research Analyst at Delta Exchange, said Bitcoin stays under pressure near $63,000. Ethereum continues to lag behind the broader market. High Treasury yields and a firm dollar cap risk appetite. Bitcoin remains below key moving averages on the four-hour chart. Resistance builds at $63,350 to $63,800. A close above $63,800 could open a path toward $64,300. A break below $63,000 may expose the $62,500 zone.

    ETF Outflows Persist, but XRP and Ethereum Funds Show Resilience

    Nischal Shetty, founder of WazirX, said crypto markets consolidated through the session. Bitcoin traded near $63,085 after a mild 0.66% dip. US spot Bitcoin ETFs saw $265.4 million in outflows on July 31. Ethereum ETFs still attracted $365 million during the month. XRP funds drew $27.29 million in July, extending a four-month streak. Cumulative XRP ETF inflows now stand near $1.5 billion. Bitcoin’s recovery range sits between $63,700 and $64,300.

    Crypto Prices Today: Top 10 Coins at a Glance

    Based on live CoinMarketCap data as of today’s session.

    Biggest Gainers: HYPE, ETH, DOGE

    Hyperliquid led the weekly board with a gain above 13%. Ethereum and Dogecoin also posted solid weekly gains above 4%. Institutional demand for large-cap altcoins picked up pace this week.

    Biggest Losers: Stablecoins and BNB Stay Flat

    Tether and USDC barely moved through the session. BNB and TRON posted only modest weekly gains. Risk appetite stays selective rather than broad across the altcoin market.

    Crypto News Today: Top Headlines Impacting Prices

    Security concerns and stalled legislation are steering sentiment across trading desks. Mixed ETF flow data and fresh network upgrades add further context.

    Coldcard Wallet Exploit Drains Tens of Millions

    A wave of unauthorized transfers tied to weak Coldcard-generated keys has drained tens of millions from cold storage wallets this month. Researchers estimate losses between $70 million and $88.6 million across affected addresses. The attacker is now targeting smaller balances and shifting how stolen funds move onchain. Security researchers say the exploit stems from a flawed key generation process. Self-custody security remains firmly in focus across trading communities.

    CLARITY Act Faces Recess Deadline Pressure

    The Digital Asset Market Clarity Act remains stalled on the Senate calendar this week. The chamber’s summer recess is set to begin around August 7, narrowing the bill’s window. Ethics language disputes continue to divide lawmakers on both sides of the aisle. Democrats are pushing for tougher provisions before granting their support. The bill’s 2026 passage now looks increasingly uncertain heading into fall.

    Bitcoin ETFs Post Weekly Outflows as Ether Funds Gain

    US spot Bitcoin ETFs recorded $61.53 million in net outflows for the week ending July 31. Bitcoin ETFs still closed July with $172.4 million in monthly inflows overall. Ethereum ETFs extended their winning streak to four straight weeks this month, adding $27.42 million in fresh weekly inflows. XRP ETFs also continued their steady four-month inflow streak in July.

    Fed Stance and ISM Data Keep Traders Watchful

    Markets are tracking Monday’s ISM survey data closely, with consensus pointing to a reading near 54.0 for July. The figure could shape near-term rate expectations meaningfully. The upcoming August 12 inflation print stands as the next major catalyst. Traders are positioning cautiously ahead of the Federal Reserve’s September rate decision.

    XRP Ledger Prepares Major Protocol Upgrade

    The xrpld 3.3.0 release is expected next week, carrying five proposed amendments to the XRP Ledger. Two features were previously withdrawn after researchers flagged critical bugs. Developers say the revised code has since been hardened against exploitation. The upgrade aims to strengthen network security and transaction reliability. XRP holders are watching the rollout closely for any price impact.

    Tether Reports Strong Quarterly Profit

    Tether posted a $1.5 billion operating profit for the second quarter, underscoring continued strength in the stablecoin sector. The result reflects steady demand for dollar-pegged digital assets. Total stablecoin trading volume continues to climb across major exchanges globally. Tether’s reserves reportedly remain well collateralized against outstanding tokens. The results reinforce stablecoins’ growing role in daily crypto settlement activity.

    Investor and Market Outlook

    Bitcoin holds near $62,738 as traders weigh a fresh custody security scare against a stalled CLARITY Act. A close above $63,700 could open a path toward stronger $64,300 resistance. A slip below $62,800 risks exposing deeper support closer to $62,500. Hyperliquid and Ethereum remain the most sensitive names to shifts in institutional risk appetite. Bitcoin’s next moves hinge on ETF flows and the Fed’s rate outlook. The Senate recess and Friday’s jobs report stand as this week’s defining catalysts.

    FAQs

    What is the Bitcoin price today?

    Bitcoin trades near $62,738.34, up 1.04% over the past 24 hours. It holds a narrow range after a choppy end to July, with support near $62,800. Resistance builds between $63,700 and $64,300 through coming sessions this week.

    Why did the Coldcard wallet exploit rattle the market?

    An estimated $70 million to $88.6 million was drained from cold storage wallets tied to weak Coldcard-generated keys. The incident renewed debate around self-custody security and added short-term caution across trading desks.

    What is the biggest crypto news today?

    The CLARITY Act’s stalled Senate progress ahead of the August recess and the Coldcard wallet exploit are shaping sentiment. Tether’s $1.5 billion quarterly profit adds a contrasting institutional strength signal, while the XRP Ledger prepares a major upgrade next week.

    Which coins are performing best today?

    Hyperliquid leads weekly gains with a rise above 13%, followed by Ethereum and Dogecoin with steady climbs above 4%. Stablecoins and BNB stayed largely flat through today’s session.

    What should investors watch this week?

    Track Monday’s ISM data, the Senate’s August recess deadline, and Friday’s US jobs report closely. Bitcoin ETF flow trends and the XRP Ledger upgrade could also shift near-term positioning across the broader crypto market.

  • Crypto Wallets Evolve: BloFin Wallet Adds Perpetual Futures, Yield Products, and Visa Payments

    Crypto Wallets Evolve: BloFin Wallet Adds Perpetual Futures, Yield Products, and Visa Payments

    Crypto wallets are moving beyond simple storage. BloFin Wallet now combines perpetual futures, yield products, and a Visa payment card, reflecting growing demand for platforms that unite self-custody, trading, earnings, and daily spending in one interface.

    BloFin Extends Wallet Services Beyond Storage

    Users can trade perpetual contracts linked to more than 100 digital and traditional financial assets through BloFin Wallet, eliminating the need for a separate derivatives exchange. The wallet maintains user control through self-custody, while its yield products allow asset storage and earnings within the same environment.

    BloFin’s Visa card connects supported digital assets with everyday retail payments. It works wherever Visa is accepted and supports both Apple Pay and Google Pay.

    Together, these services cover four common activities: storing, trading, earning, and spending. This structure reduces the number of applications required to manage a digital asset portfolio.

    Crypto Platforms Target a Unified User Experience

    Historically, crypto users relied on separate services for storage, trading, lending, and payments, often moving assets repeatedly between wallets, exchanges, and DeFi protocols. Each transfer added network fees, settlement time, and security considerations. It also created more steps for users moving from market activity to savings or spending.

    Now, exchanges and wallet providers combine spot trading, derivatives, staking, lending, payment services, and DeFi access. Some platforms include tokenized financial products. The sector’s current direction centers on reducing fragmentation through integrated services, responding to demand for smoother financial tools rather than isolated applications.

    Payments and Capital Efficiency Shape Competition

    Unified platforms can improve capital efficiency because users keep assets within one environment. They can trade, seek yield, or make purchases without repeated blockchain transfers. This approach reduces operational friction, as funds remain available for different uses without moving through several networks and service providers.

    Payment cards extend crypto services beyond market activity and long-term holding. Visa and Mastercard partnerships connect digital asset balances with established payment networks and retail systems. Stablecoins may support this connection by reducing price volatility during payments, and their blockchain settlement features fit platforms combining digital assets with daily transactions.

    Meanwhile, wallet providers continue expanding into derivatives, DeFi, and tokenized assets. Competition now centers on which platforms can offer the smoothest digital asset lifecycle through one interface.

    Conclusion

    Crypto wallet providers are combining self-custody, perpetual futures, yield products, and payment cards to reduce transfers between services. BloFin Wallet reflects this shift through integrated trading and Visa spending. Users now face a market where platforms compete across the full digital asset lifecycle.

  • Leading Non-Custodial Crypto Neo Banks Reshaping Digital Finance in 2026

    Leading Non-Custodial Crypto Neo Banks Reshaping Digital Finance in 2026

    Non-custodial crypto neo banks are gaining momentum as more users demand full control over their digital assets. These platforms blend traditional banking features with self-custody, offering services such as crypto payments, DeFi access, staking, and debit cards — all while keeping private keys in the user’s hands. With over 700 million crypto users worldwide and the self-custody market growing at 20–25% annually, these banks are set to become a cornerstone of digital finance. Here are the top platforms to watch in 2026.

    Bitwala: Banking Meets Self-Custody

    Based in Germany, Bitwala combines a traditional bank account with a non-custodial Bitcoin wallet. Users can save, spend via a Visa debit card, and transfer funds via SEPA, all while retaining control of their private keys. The platform serves 29 EEA countries and has raised approximately €42 million.

    Argent: Simplified Crypto Banking

    Argent simplifies the wallet experience with social recovery instead of seed phrases, reducing the risk of losing assets. It offers direct access to DeFi, stablecoin payments, and Ethereum Layer-2 networks. With over 2 million app downloads, it’s a favorite among newcomers.

    Safe: Enterprise-Grade Multi-Sig Security

    Formerly Gnosis Safe, Safe is trusted by businesses and DAOs for multi-signature security. The ecosystem protects over $100 billion in digital assets, making it one of the largest self-custody platforms globally.

    Ledger Live: Beyond Hardware Wallets

    Ledger’s Ledger Live app now offers buying, swapping, staking, and NFT management. With over 7 million hardware devices sold, it leverages a vast user base to expand into crypto financial services.

    Trust Wallet: Largest Self-Custody Community

    Trust Wallet supports over 100 blockchains, thousands of tokens, NFTs, and staking. With more than 220 million users, it’s the most widely used non-custodial wallet, offering a comprehensive mobile experience.

    Coinbase Wallet: Full Ownership Within the Coinbase Ecosystem

    Coinbase Wallet is a fully non-custodial wallet that integrates with the Coinbase exchange while supporting DeFi, NFTs, and multiple blockchains. Users get exchange services without sacrificing control.

    Blockchain.com Wallet: A Trusted Veteran

    Blockchain.com has evolved from a blockchain explorer to a full crypto platform with self-custody, trading, and rewards. With around 39 million verified wallets, it remains a reliable choice.

    Rabby Wallet: DeFi Power User’s Choice

    Rabby Wallet excels for DeFi enthusiasts, offering seamless network switching, transaction previews, and security alerts. Though smaller, it’s rapidly gaining traction in the DeFi community.

    Best Wallet: Rapidly Growing Newcomer

    Best Wallet launched recently but already offers portfolio management, token discovery, cross-chain swaps, and staking. Upcoming features like MEV protection and gas optimization aim to challenge larger players.

    Ctrl Wallet: Multi-Chain Compatibility

    Ctrl Wallet focuses on cross-chain operations, including swaps, NFT management, and dApp access via browser extensions and mobile. Its broad compatibility suits users who move assets across ecosystems.

    The Road Ahead

    Future innovations like account abstraction, MPC security, stablecoin payments, and regulatory frameworks (e.g., MiCA) will drive growth. With a $300 billion stablecoin market and $150–200 billion locked in DeFi, non-custodial crypto neo banks are poised to lead global digital finance.

    FAQs

    1. What is a non-custodial crypto neo bank? A digital platform where users control their private keys while accessing banking-like services.
    2. Why are they popular? Users prefer full ownership over trusting third parties.
    3. Which has the largest user base? Trust Wallet with over 220 million users.
    4. Can they handle everyday payments? Yes, many offer debit cards, stablecoin payments, and fiat transfers.
    5. What trends will shape them in 2026? Account abstraction, MPC security, stablecoin adoption, and stronger regulation.
  • KuCoin Web3 Wallet Now Supports Robinhood Chain for Tokenized Asset Self-Custody

    KuCoin Web3 Wallet Now Supports Robinhood Chain for Tokenized Asset Self-Custody

    For most people holding both crypto and traditional investments, managing the two has meant managing two separate worlds. That divide is narrowing slightly with KuCoin Web3 Wallet’s newly added support for Robinhood Chain, which lets users bring tokenized real-world assets into the same self-custodial wallet they already use for onchain activity.

    With the update live, users can add Robinhood Chain directly within the wallet, track and manage assets native to the network, and tap into the ecosystem’s early applications, all without handing custody of their assets to a third party. It is a modest technical step with a larger implication. KuCoin Web3 Wallet is now one of the first Web3 wallets to support the chain, putting its users at the front of a still forming ecosystem instead of catching up to one that has already matured.

    The timing is not incidental. Tokenized stocks, ETFs, and other instruments tied to traditional markets are moving onchain faster than most wallets were originally designed to handle. A Web3 wallet used to be judged mainly on how safely it stored a handful of tokens. Increasingly, it is judged on how well it helps users make sense of a messier picture: crypto assets, tokenized equities, and everything in between, spread across chains that do not always talk to each other.

    KuCoin Web3 Wallet has spent its past several updates trying to close that gap. Support for tokenized U.S. stocks and ETFs, the addition of xStocks, in-wallet perpetuals, and steady multi-chain expansion have all pointed in the same direction. Robinhood Chain support fits that same pattern rather than arriving as a standalone feature.

    What is happening on Robinhood Chain itself adds another detail worth noting. Beyond the tokenized assets one might expect, the network has already seen community members creating their own assets and experimenting onchain, activity that was not centrally organized. That kind of organic behavior tends to show up before an ecosystem’s growth curve, not after it, suggesting Robinhood Chain is generating real usage patterns of its own.

    There is also a quieter benefit at play. Every additional chain a user has to track individually is another login, another interface, and another place things can go wrong. Bringing Robinhood Chain into an existing multi-chain structure reduces that sprawl instead of adding to it, letting a single wallet stand in for what used to require several.

    The result is two different audiences getting something useful from the same update. Web3 native users get an early foothold in an emerging RWA and stock token ecosystem. Traditional finance investors testing crypto for the first time get a gentler on ramp, a way to see the kind of assets they already understand represented onchain, without giving up the self-custody that drew them to Web3 in the first place.

  • UKey Seed Ring: A Wearable NFC Ring for Secure Crypto Backup and Recovery

    UKey Seed Ring: A Wearable NFC Ring for Secure Crypto Backup and Recovery

    UKey Limited, a self-custody hardware brand for cryptocurrency users, has unveiled the Seed Ring—a battery-free NFC ring designed to make seed phrase backup a seamless part of everyday life. Unlike traditional hardware wallets that are stored away in drawers, the Seed Ring is a wearable device that brings hardware signing into daily routines.

    Why a Ring?

    In the world of self-custody, the greatest risk to asset security often lies not in how transactions are signed, but in how the seed phrase is stored. Photos, screenshots, and scraps of paper are easily lost, damaged, or stolen. Most hardware wallets focus on signing security but leave backup to the user and a piece of paper. UKey splits the two functions: signing is handled by a dedicated device, while backup is managed by the Seed series. The Seed Ring transforms a recovery credential from a forgotten note into a wearable ring that can be tapped to a phone when needed.

    Three Defining Features of the Seed Ring

    • Battery-free and passive: The ring has no battery. It draws power only when held near an NFC-capable phone and stops responding immediately when moved away. No background processes, no remote connectivity.
    • Ceramic construction for daily wear: A high-strength ceramic surface resists scratches and everyday wear while remaining NFC-friendly. It can be worn as a ring or on a chain, just like any ordinary accessory.
    • Seed phrase never stored in plaintext: The ring holds only the index, order, and checksum data required for recovery—never the full seed phrase. Even if the ring falls into the wrong hands, the complete seed phrase cannot be read.

    More of the Seed Series

    The Seed Ring is the first product in the Seed series. Two additional backup companions are coming: the Seed Card, a credit-card-sized backup for wallets or card holders, and the Seed Ti, a titanium backup built to withstand fire and water. All share the same philosophy—your recovery credential should fit your lifestyle, and none store the seed phrase in plaintext. Further details will be announced through UKey official channels.

    UKey’s Philosophy

    UKey believes that something worn on the hand should be safer than a note in a drawer. The industry has perfected signing, but most coin losses stem from poor seed phrase storage. UKey aims to make backup and signing not cold, utilitarian tools, but items you can wear and live with.

    For launch updates, visit ukey.com, follow @UKeyWallet on X, or subscribe to UKeyWallet on YouTube.