#security
32 posts
Crypto swap guides, coin analysis, and exchange comparisons.
Swiss Bitcoin Pay breach: servers offline, merchant data possibly exposed
On September 14, 2026, non-custodial processor Swiss Bitcoin Pay took its servers offline after an intruder likely accessed internal systems. Emails, bitcoin addresses and IBANs may be exposed; it says funds are safe.
Symbiosis bridge exploit: $46B in fake syBTC minted, $336K cashed out
On September 11, 2026, a bug in Symbiosis’s BridgeV2 contract let an attacker mint about $46.1 billion in unbacked syBTC. Thin liquidity meant only ~$336,000 was cashed out; the team has recovered about 15 BTC.
Revolut fake government request leaks passports and bitcoin histories
On September 11, 2026, Revolut began telling a “limited” number of customers it had handed their passports, selfies, addresses and full transaction histories, including bitcoin activity, to a fake government request.
Trezor, BitBox phishing: fake STM32 alert sent via breached email provider
On September 9, 2026, Trezor and BitBox warned that attackers breached a shared newsletter provider and sent a fake “STM32 Entropy Vulnerability” alert from Trezor’s real domain, passing SPF, DKIM and DMARC.
Ethereum sets December 2029 quantum-resistance deadline: what it means
On September 8, 2026, the Ethereum Foundation’s plan to make Ethereum fully quantum-resistant by December 2029 was reported, with FOCIL and Frame Transactions ranked must-ship for Hegotá.
Orionx shuts down: $7M in customer crypto missing at Chilean exchange
On September 7, 2026, Chilean exchange Orionx is winding down after a forensic audit found more than $7 million in customer assets moved to outside wallets; over 100,000 users can’t withdraw.
Liquid Network exploit: 4,000 BTC drained via Elements bug in the L-BTC peg
On September 6, 2026, attackers used a bug in Blockstream’s Elements software to create invalid L-BTC on Liquid and peg out 3,996 BTC (about $320 million) — roughly 95% of the federation’s bitcoin.
Coldcard hack 2026: Wave 3 thief tests THORChain with 20.5 stolen BTC
On 2 September 2026 the Coldcard “Wave 3” thief moved 20.50 BTC through THORChain to a new Ethereum address and kept getting refunded — the first on-chain movement from the ~1,816 BTC stolen in July and August.
Core DAO and Injective chain halts, September 2026: when L1s hit pause
On 2 September 2026 Core DAO announced an emergency hard fork after validators drew excess CORE rewards, days after Injective stalled for about 3h42m to stop a $4.9M exploit — four chains paused in one week.
StealthEX Review 2026: Fees, Limits, Safety
We break down StealthEX's real fee spread, per-coin swap limits, and when verification kicks in — everything to check before you route through it.
What Can Chainalysis Actually See On-Chain in 2026?
Chainalysis clusters wallets and traces fund flows on-chain — it can't decrypt anything. See what it actually detects, and where private routing breaks the trail.
Best Bitcoin wallets in 2026: hardware, mobile, Lightning ranked
The Bitcoin wallets that actually hold up in 2026 — hardware, mobile, Lightning. Air-gapped vs USB, single-sig vs multisig, Sparrow vs Wasabi, and who each fits.