Coinbase2026-09-30 03:46:06Coinbase faces fresh security scrutiny after Ari Paul alleges cover-up of $1 billion in hacksCoinbase is facing renewed scrutiny after BlockTower Capital founder Ari Paul alleged that the exchange concealed large-scale, repeated hacking incidents that affected at least a dozen institutions and involved more than $1 billion in losses. Paul said his firm lost $25 million several years ago and that the funds were never returned, though he has not yet published verifiable evidence. Coinbase had not issued a public response as of publication. The allegation surfaced after an unrelated dispute on X, where a user accused Coinbase of locking an account and claiming a $1.2 million balance was still owed. Coinbase Base App lead Cobie said the company could not find an account matching the description and suggested the post was being used to drive engagement and promote a low-quality token. The controversy has revived attention on Coinbase’s past security record, including a 2021 SMS account recovery flaw that affected at least 6,000 customers and a 2025 insider-driven data theft case tied to overseas support staff, which Coinbase said could cost between $180 million and $400 million. The report also places the Coinbase dispute alongside recent incidents involving Bitget, Liquid Network and Coldcard, highlighting how reimbursement, frozen withdrawals and legal recourse vary sharply depending on where crypto assets are held.290
Galaxy2026-09-27 11:06:47Galaxy monitor says COLDCARD Seed Entropy theft has led to 1,830 BTC stolenChainCatcher reported that, according to monitoring cited from Galaxy’s head of research, the COLDCARD Seed Entropy theft incident has so far resulted in 1,830 BTC being stolen. The activity is tied to three rounds of attacks and more than 30 smaller related indicators. GLXY Research has received reports from 256 victims, with a median loss of 1.1 BTC. Tracking of the attacker is still underway. The update focuses on the current scope of the theft, the number of attack waves identified, and the victim data collected so far. No additional details on the attacker’s identity or recovery progress were disclosed in the brief.250
Bitcoin2026-09-21 19:17:5952.37 BTC moved to trust-linked address, representing 2.8% of Coldcard exploit fundsGalaxy’s head of research said monitoring data showed Coldcard white-hat funds consolidated 52.37 BTC from Wave 2 and Footprints AA, AU, and AX into a new address. The address wrote the OP_RETURN message “claim:cryptorecoverytrust dot com” in block 967,948. Based on the disclosed figures, the white-hat funds account for 2.8% of the funds tied to the Coldcard vulnerability attack. The update identifies the source clusters involved in the transfer and points to a trust-related recovery message embedded on-chain. No additional transfer details or recovery timeline were disclosed in the source item.310
Galaxy Resear2026-09-21 14:43:51Galaxy Research says Coldcard white-hat hacker moved 40.71 BTC with claim link attachedGalaxy Research said a Coldcard white-hat hacker moved about 40.71 BTC at Bitcoin block height 967948, a transfer valued at roughly $3.31 million based on the figures cited in the source. The transaction used a batch distribution structure with 20 inputs and 480 outputs. Galaxy Research also noted that the OP_RETURN field attached to the transaction included a claim link for affected users. On-chain traces, according to the firm, match activity previously seen from addresses tied to part of the earlier Coldcard hacker-related movements. The update focuses on the transaction structure, the amount moved, and the recovery link embedded in the transaction data.320
Coldcard2026-09-20 05:41:35Coldcard firmware flaw from 2021 linked to more than $100 million in stolen BitcoinA 2021 firmware flaw in hardware wallet maker Coldcard has been tied to a large Bitcoin theft, according to the report cited by Odaily. The issue allegedly reduced randomness in some recovery seeds, and attackers have moved roughly 1,600 to 1,800 BTC from affected wallets since July 30, spanning thousands of addresses and valued at more than $100 million. Coinkite, the company behind Coldcard, said it has to consider the possibility that someone used AI to review its public firmware, though there is still no confirmation that AI played a role in the attack. The report also pointed to a separate disclosure from Shielded Labs researcher Taylor Hornby, who said an audit agent powered by Claude Opus 4.8 found a vulnerability in the Zcash Orchard shielded pool circuit dating back to 2022. In testing, the flaw could create unlimited counterfeit ZEC without leaving traces. Developers fixed the issue within days, and no theft has been confirmed. Separately, Chainalysis said daily on-chain inscriptions carrying malware instructions and command-and-control information rose from about 2.06 to 11.1, a 440% increase.340
Coldcard2026-09-20 05:41:52Coldcard firmware flaw tied to theft of roughly 1,600 to 1,800 BTC, report saysA 2021 firmware flaw in hardware wallet maker Coldcard left some recovery seeds with insufficient randomness, and attackers have drained roughly 1,600 to 1,800 Bitcoin from affected wallets since July 30, according to ChainCatcher. The stolen funds span thousands of addresses and are valued at more than $100 million. Coldcard manufacturer Coinkite said it must assume someone used AI to review its public firmware, though there is still no confirmation that AI was involved in the attack itself. The report also cited a separate finding from Shielded Labs researcher Taylor Hornby, who used a Claude Opus 4.8 auditing agent to identify a Zcash Orchard shielded pool circuit flaw dating back to 2022. In testing, the bug could generate unlimited counterfeit ZEC without leaving traces. Developers fixed that issue within days, and no theft has been confirmed. Chainalysis data in the same report showed that on-chain insertions carrying malware instructions and command-and-control information rose from about 2.06 per day to 11.1 per day, a 440% increase.360
Bitcoin2026-09-10 00:44:43More Than 50 BTC Moved From COLDCARD Entropy-Flaw Wallets for Return to OwnersDART said it has recovered more than 50 BTC from wallets affected by the COLDCARD entropy vulnerability, working with independent white-hat researchers to move the funds before a malicious attacker could take them. The recovered bitcoin has been placed into Crypto Recovery Trust, a special-purpose statutory trust formed under Wyoming law to hold recovered digital assets until lawful owners are identified and verified. DART said the trust will document the recovery process, keep the BTC separate from funds belonging to DART and the researchers, and carry out blockchain analysis, ownership checks, and sanctions screening. Verified owners will be given a legal process to receive their assets back. If ownership is disputed, or if the funds are tied to sanctions or criminal proceedings, the bitcoin will be handled under applicable legal procedures. DART also said additional vulnerable assets and recovery leads remain under review.810
DART2026-09-10 00:45:56DART says more than 50 BTC moved from wallets exposed to COLDCARD entropy flawDART said it worked with independent white-hat researchers to recover more than 50 BTC from wallets affected by the COLDCARD entropy vulnerability, transferring the funds before a malicious actor could take them. The group described itself as a digital asset recovery organization that works with white hats to protect vulnerable funds and coordinate their lawful return to owners. It added that the researchers did not request a bounty and intend to return the bitcoin to the rightful owners. The recovered BTC has been placed into Crypto Recovery Trust, a special-purpose statutory trust formed under Wyoming law. According to DART, the trust will hold recovered digital assets until lawful owners are identified and verified. It will document the recovery process, keep the BTC separate from funds belonging to DART and the researchers, carry out blockchain analysis, ownership verification, and sanctions screening, and provide a lawful return process for verified owners. If ownership is disputed, or if the funds are tied to sanctions or criminal proceedings, the BTC will be handled under applicable legal procedures. DART also said other vulnerable assets and recovery leads remain under review.820
