Exchange Risk

Coinkite faced customer backlash after emailing buyers with purchases dating back to 2019 to warn of a seed generation randomness bug in its Coldcard hardware wallets. The outreach, which began Friday, came after threat actors exploited the vulnerability to steal over 1,000 BTC in recent days.

According to Eric Balchunas, Bloomberg senior ETF analyst, on August 2, Coldcard hardware wallet raised security concerns due to its small team size. Balchunas questioned whether a company with approximately five employees based in Canada should bear responsibility for millions of users' Bitcoin

According to CoinKite, Coldcard hardware wallet users lost over $70 million in Bitcoin after a critical firmware flaw enabled attackers to remotely drain funds without physical access. Galaxy Research tracked 1,082.65 BTC swept across 1,196 addresses in approximately 41 minutes,

According to a Reuters investigation, Binance received at least $676 million in cryptocurrency from Shelbit, an unlicensed Dubai exchange, since May 2024. The Virtual Assets Regulatory Authority (VARA) fined Shelbit on July 24 over anti-money-laundering violations, citing threats to the UAE's

Hyperliquid, a global decentralized exchange (DEX), experienced over $80 million in liquidations of SK Hynix perpetual futures on July 28 at 8:01 AM Korean time, triggered by a single share of SK Hynix stock traded on South Korean alternative trading system (ATS) NXT. The SKHYNIX perpetual futures p

Shelbit, a Dubai-based unlicensed crypto exchange, processed at least $4 billion connecting Iranian gambling networks and sanctioned entities, Reuters reported Friday. The exchange, run by Iranian expatriate Siavash Kayvanpour, began operations in May 2024 according to blockchain data analyzed by tw

According to Reuters, an unlicensed Dubai-based crypto exchange called Shelbit sent at least $676 million to Binance from May 2024 onward, including approximately $540 million transferred after the Virtual Assets Regulatory Authority (VARA) fined the exchange in January 2025 for operating without a

South Korean cryptocurrency exchanges recorded an active user rate of 19.5% as of the end of June 2025, according to data submitted by Financial Supervisory Service to National Assembly member Lee Jong-wook of the People Power Party. Among all users who completed Know Your Customer (KYC)

According to Bitcoin.com News, on July 30, a Coldcard hardware wallet exploit drained 1,082 BTC from over 1,100 wallets in a coordinated attack, exploiting a long-standing firmware vulnerability. The incident sent Bitcoin tumbling into early August trading, with the world's largest cryptocurrency

Marcos Arturo Kleiman Tronllan, CEO of Moneyflip LLC, was arrested in Miami on July 30 over an alleged murder-for-hire plot involving cryptocurrency payments. The U.S. Department of Justice announced that Kleiman faces one count of murder-for-hire under 18 U.S.C. § 1958(a) after a criminal

Trade.xyz announced that partial compensation payouts for the July 27 Hailstone contract pricing anomaly have been completed, with USDC automatically distributed to users without additional action required. Compensation exceeding 10,000 USDC will be released after users complete due diligence

More than 40 former Pump.fun employees say the Solana launchpad dismissed them in early April, roughly two months before their PUMP token allocations were scheduled to vest. An anonymous X account claiming to represent the ex-staff began publishing termination emails this week, according to a

According to SecondFi, the platform has renewed its bounty offer to recover 16.1 million ADA stolen in a June exploit. The validated data shows the attack affected 374 wallets and stemmed from a key-generation vulnerability in wallet security infrastructure. SecondFi secured 129 million ADA

According to Galaxy Research, nearly 1,200 Coldcard-linked addresses were drained of 1,082.65 BTC (~$70.2 million) on July 30, between 01:10:20 and 01:51:26 UTC, due to a firmware vulnerability affecting the hardware wallet. Coinkite, the device maker, confirmed the issue on Thursday and warned

According to a Sandmark report, Pump.fun laid off employees in April who were due to receive PUMP tokens worth millions of dollars starting June 2026. The Solana-based memecoin launchpad's co-founder Noah Tweedale attributed the layoffs to the company growing "too quickly." The dismissed employees h

The FTX Recovery Trust released $900 million to creditors on Friday in its fifth distribution round since the exchange's 2022 bankruptcy filing. Former FTX user Sunil Kavuri confirmed receipt of funds through Kraken after receiving notice last week that the trust had transferred the payment. The dis

According to Odaily, crypto payments company Kulipa, which raised $6.2 million in seed funding, shut down on July 28-29, impacting 120,000 issued payment cards across 20 partners including Ready and Solflare. The company had suspended European Economic Area operations in mid-June following

According to GroundUp investigation, on Wednesday July 29, Morita Forestry—a Chinese-operated pyramid scheme—halted all payouts to South African investors. Withdrawals have been blocked since Friday July 24. The scheme, which falsely promised daily returns on U.S. woodland investments, had

According to Coinkite, a firmware defect in its Coldcard hardware wallets resulted in the loss of approximately 594 BTC (around $38 million) on July 30-31, 2026. Funds were drained from roughly 500 wallets within 25 minutes, with attackers consolidating 562 BTC into a single address. The flaw

According to Foresight News, on July 31, Upbit designated JasmyCoin (JASMY) and ThunderCore (TT) as trading warning assets. Deposit channels for both assets have been closed.