Nunchuk's developers say multivendor multisig should be the standard after Ledger's reseller compromise
Bitcoin users moving to multivendor multisig after Coldcard and Ledger face a $285 device bill at the lowest listed prices, against $59 for one wallet. Wallet makers and services like Casa and Unchained could gain customers, news.bitcoin.com reported, but the cost may push some users to custodians.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives70
- Confidence50
Fireblocks wants custodians to shrink Bitcoin's quantum exposure one spend at a time
Fireblocks' Michael Gutkin ties Bitcoin's quantum risk to exposed public keys, citing estimates that 6.7 million to 7 million BTC already sit behind them. Custodians can apply his remedy, fresh addresses plus a running count of exposed coins, without waiting for BIP 360.
Reality
- Evidence52
- Adoption30
- Hype gap+10
- Incentives65
- Confidence48
Blockstream has not said whether its 11-of-15 federation was bypassed or complied. Until someone publishes what share of Liquid's reserves left on September 6, an L-BTC balance is an unverified claim.
Perspective Coverage
7 publishers
- Builder
- Builder 30%
- Operator
- Operator 40%
- Investor
- Investor 30%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence58
The attackers who drained 4,000 BTC from Liquid handed back 3,400 after the patch and kept 598.5. Blockstream puts about $47 million on that hold and says it will trace the coins instead of paying.
Perspective Coverage
7 publishers
- Builder
- Builder 24%
- Operator
- Operator 43%
- Investor
- Investor 33%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+10
- Incentives62
- Confidence68
Blockstream paused the Liquid bridge after roughly 4,000 BTC left the federation wallet, and the people holding it will send most of it back only once the flaw is fixed, which puts the patch timetable in their hands.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 41%
- Investor
- Investor 33%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence70
Blockstream pauses Liquid after $320 million exploit, tries to reach hackers onchain
The withdrawal cleared every control the Liquid Federation actually operates, which is why an 11-of-15 quorum released the bitcoin in 23 minutes. Recovery now depends on whoever holds the coins answering an email address.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence55
Coinbase's quantum fallback puts a whole bitcoin key back inside one box
Head of cryptography Yehuda Lindell says hash-based post-quantum signatures may not split across parties. So Coinbase is researching threshold decryption plus a programmable HSM for the $250 billion it custodies.
Reality
- Evidence46
- Adoption18
- Hype gap+24
- Incentives62
- Confidence52
SlowMist puts 14 iOS versions inside one Safari key-theft chain
Blockchain security firm SlowMist says an active exploit chain walks from a Safari page to kernel access and the iOS Keychain on everything from iOS 13 to 26.5, while Apple's patches, by the same account, reach 26.3.
Reality
- Evidence30
- Adoption22
- Hype gap+38
- Incentives66
- Confidence34
A node bug made Liquid's 11-of-15 multisig pay out on coins that never existed
Blockstream's federation signers behaved correctly and still released roughly 4,000 bitcoin, because the software that decides what counts as a real L-BTC is a different system from the keys guarding the peg.
Reality
- Evidence58
- Adoption45
- Hype gap+12
- Incentives66
- Confidence55
A machine found the bug and set the clock: Ledger disputes TestMachine's timeline
Ledger's CTO says the Ethereum clear-signing fix shipped two weeks before disclosure. The public release record cannot confirm that, and an autonomous scanner chose the publication date.
Reality
- Evidence38
- Adoption
- Not scored
- Hype gap+24
- Incentives72
- Confidence36
Coinkite now makes Coldcard owners roll dice, after $130M walked out of air-gapped wallets
A 2021 seed flaw cut entropy from 128 bits to about 40, so no attacker needed to touch the hardware. Every seed generated before July 2026 now has to be replaced.
Reality
- Evidence62
- Adoption54
- Hype gap+14
- Incentives66
- Confidence58