On-chain analyst Specter traced more than $86 million drained from hundreds of Ledger hardware-wallet users across Ethereum, TRON and Bitcoin. With the cause unconfirmed, holders cannot yet tell whether moving coins to a new device would help at all.
Perspective Coverage
10 publishers
- Builder
- Builder 27%
- Operator
- Operator 44%
- Investor
- Investor 29%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence60
COLDCARD says its official X account posted a phishing link on October 11, despite offline two-factor protection the wallet maker has used since 2017. With no explanation yet from COLDCARD or X, a security alert seen on social media is worth acting on only once the maker's own website repeats it.
Perspective Coverage
5 publishers
- Builder
- Builder 15%
- Operator
- Operator 48%
- Investor
- Investor 37%
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence60
Bitget's wallet breach accounts for about four-fifths of September's crypto theft after returns
Bitget lost about $387.5 million to forged withdrawals from its wallet system, more than half of September's $742 million in crypto thefts. Most of Liquid Network's loss was handed back, so what stayed stolen sits mainly with one exchange's withdrawal infrastructure.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence55
Coldcard owners who held their own keys lost over $100 million to a firmware bug
Coinkite's Coldcard firmware skipped its hardware random number generator, letting attackers brute-force seeds and drain over $100 million in bitcoin. Liquid's later $320 million drain adds node software to the code a bitcoin holder has to trust.
Reality
- Evidence38
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence42
The wallets held. The customer list did not: 39,798 names, phone numbers and shipping addresses, taken through commerce plumbing nobody threat-models.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 55%
- Investor
- Investor 17%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence70
White hats move 52.37 BTC into a Wyoming statutory trust built for COLDCARD victims
The Crypto Recovery Trust, a Wyoming entity advised by Steptoe LLP, now controls coins worth about $3.5m at the exploit's implied price, against more than $100m that COLDCARD holders lost from July 30, 2026.
Reality
- Evidence28
- Adoption22
- Hype gap+34
- Incentives62
- Confidence34
Core Lightning says the machine-written reports found real flaws in its payments software. It is holding the count and severity for at least two weeks, leaving node operators to decide what to do with a hazard whose size is still private.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 52%
- Investor
- Investor 20%
Reality
- Evidence60
- Adoption40
- Hype gap+25
- Incentives68
- Confidence62
Harmony blames state actors and AI agents for shutting the layer-1 it launched in 2019, and the money set aside to pay validators to power down is worth more than everything left locked on the chain it closes.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 38%
- Investor
- Investor 32%
Reality
- Evidence55
- Adoption20
- Hype gap+45
- Incentives75
- Confidence60
Coinkite now makes Coldcard owners roll dice, after $130M walked out of air-gapped wallets
A 2021 seed flaw cut entropy from 128 bits to about 40, so no attacker needed to touch the hardware. Every seed generated before July 2026 now has to be replaced.
Reality
- Evidence62
- Adoption54
- Hype gap+14
- Incentives66
- Confidence58