#wallets
13 posts
Crypto swap guides, coin analysis, and exchange comparisons.
Coldcard X account hijacked to push fake firmware alert, October 2026
On October 11, 2026, Coldcard’s official X account posted a fake “critical firmware vulnerability” alert for the Mk4, Mk5 and Q with a phishing link; no losses have been verified.
Ledger probes $86M+ losses tied to reseller CryptoBilis, October 2026
On October 9, 2026, Ledger opened an investigation into $86M+ in losses reported by users who bought devices from Southeast Asian reseller CryptoBilis, and told recent buyers not to set them up.
FinCEN withdraws unhosted wallet and mixer rules: October 2026 explained
On October 5, 2026, FinCEN was reported to have withdrawn its 2020 unhosted-wallet proposal, with $3,000 ID and record-keeping checks, and its 2023 mixer rule; notices hit the Federal Register on October 6.
SEC proposes crypto self-custody rule for advisers and funds (October 2026)
On October 1, 2026, the SEC proposed letting investment advisers and funds self-custody client crypto when no permitted custodian is available, and treating state trust companies as qualified custodians.
CFTC no-action letter: self-custodial wallets and front-ends aren’t brokers
On September 17, 2026, CFTC staff said passive wallets and front-ends routing derivatives orders to registered firms needn’t register as introducing brokers, if they hold no user funds and meet ten conditions.
Trezor, BitBox phishing: fake STM32 alert sent via breached email provider
On September 9, 2026, Trezor and BitBox warned that attackers breached a shared newsletter provider and sent a fake “STM32 Entropy Vulnerability” alert from Trezor’s real domain, passing SPF, DKIM and DMARC.
El Salvador IMF review: Chivo goes private, bitcoin reserve row explained
On September 3, 2026, the IMF said El Salvador moved majority control of its Chivo wallet to a private operator and that all bitcoin added to its ~7,764 BTC reserve since June 2025 came from private donations.
Coldcard hack 2026: Wave 3 thief tests THORChain with 20.5 stolen BTC
On 2 September 2026 the Coldcard “Wave 3” thief moved 20.50 BTC through THORChain to a new Ethereum address and kept getting refunded — the first on-chain movement from the ~1,816 BTC stolen in July and August.
Best Bitcoin wallets in 2026: hardware, mobile, Lightning ranked
The Bitcoin wallets that actually hold up in 2026 — hardware, mobile, Lightning. Air-gapped vs USB, single-sig vs multisig, Sparrow vs Wasabi, and who each fits.
Crypto cold storage in 2026: hardware vs paper vs metal explained
Cold storage in 2026 — how hardware wallets, paper backups, and metal plates actually compare for protecting your seed phrase against theft, fire, and time.
Best Monero wallets in 2026: where to store XMR
Picking a Monero wallet in 2026 — Monero GUI, Feather, Cake, Stack, hardware options (Ledger, Trezor) and the FCMP++ readiness check before you receive XMR.
What is a refund address in a crypto swap? Complete guide
A refund address is the lifeline when your crypto swap fails or expires. Learn what it is, how to pick one, common mistakes, and what happens without it.