Private Keys

SafePal disclosed a security incident that exposed names, physical addresses and contact details tied to customer orders. The crypto wallet provider said funds, seed phrases, private keys, bank information and government IDs were not affected.

A Bitcoin wallet inactive since 2013 moved 500 BTC worth about $31.3 million on Monday, drawing attention as long-dormant coins began shifting on-chain. The movement comes during a broader security crisis tied to Coldcard hardware wallets, with market participants watching whether old holders are migrating funds out of caution.

A Coldcard firmware vulnerability tied to weak software-based randomness has been linked to three waves of bitcoin sweeps across thousands of addresses. The latest activity is targeting smaller balances and using more complex onchain collection patterns.

A firmware flaw in Coinkite’s Coldcard hardware wallet has been linked to the theft of nearly 600 bitcoin, worth roughly $38 million so far. The incident is forcing Bitcoin investors to reconsider the trade-offs between self-custody, professional custodians and spot Bitcoin ETFs.

Ledger has introduced Ledger Agent Stack, an open-source toolkit designed to let AI agents interact with crypto wallets without taking control of private keys. The system allows agents to read balances, analyze portfolios and prepare transactions, but sensitive actions must be approved on a Ledger hardware device before execution.

Roughly $16.69 billion has been lost to crypto hacks, and investigators say stolen private keys account for about 40% of that total. The industry is now leaning on multi-party computation, account abstraction, and tighter operational controls to reduce single-point failure risk.

Microsoft has identified a crypto clipper worm that is spreading through infected USB drives and targeting Windows users’ wallets. The malware steals clipboard data, exfiltrates information over Tor and can replace recipient addresses during transfers.