Skip to content
COLD HARDSATS
Get the brief

News

Bitcoin news

Latest headlines

Headlines link to the original publisher. We do not copy articles; inclusion is not endorsement. Security tags link to our Security Status tracker; Possible FUD is an automated keyword flag on fear-driven headlines, not a judgment that a story is false.

Sources: Bitcoin Magazine · Bitcoin Optech · CoinDesk · Decrypt · The Block. Updated .

Security advisories

  • Checked

    COLDCARD Mk4 / Mk5 / Q: Advanced users only, new seeds only

    A firmware RNG integration error produced weak seeds; affected seeds were brute-forced offline and thefts began July 30, 2026. The devices were not remotely hacked.

  • Checked

    Ledger (current models): We don't recommend Ledger for bitcoin-only self-custody right now. If you use one anyway, buy only direct from ledger.com, treat any device that arrives already set up or with a printed seed as compromised, never restore an existing seed onto a device you didn't buy direct, and update only through the official Ledger Wallet app

    Oct 2026: criminals fitted cellular implants into genuine Ledger devices to capture seeds during setup. Galaxy Research says they were sold through CryptoBilis, which Ledger's own site listed as an authorized reseller for Indonesia, Malaysia and the Philippines; even authorized resellers can be compromised. Ledger says the secure element, OS and servers were not compromised.

  • Checked

    BTCPay Server: Recommended for merchants on current version

    Versions before 2.4.2 let unauthenticated attackers fetch LND macaroons; this was exploited. On-chain wallets were not affected.

Full Security Status, with sources →

Latest videos

All videos →