Trezor will end its resellers' authorization on January 1, 2027, days after Ledger found an LTE spy implant in wallets sold by CryptoBilis. Trezor says there is no evidence its own devices were compromised.
Perspective Coverage
7 publishers
- Builder
- Builder 24%
- Operator
- Operator 47%
- Investor
- Investor 29%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+12
- Incentives60
- Confidence66
BasedApp's leak of passports tied to wallets bolsters the case against HMRC's crypto record demands
BasedApp said a breach exposed passport numbers and home addresses linked to customer wallets, without saying how many of its 100,000-plus users were hit. The leak gives Recap a live example in its fight against HMRC's draft power to demand crypto records without tribunal approval.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+28
- Incentives55
- Confidence45
A fulfillment partner exposed names, addresses and phone numbers belonging to hardware wallet buyers, according to The Register. The vendor's boundary was the company's boundary.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 55%
- Investor
- Investor 17%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+5
- Incentives60
- Confidence68
Roughly 40,000 SafePal customers had names, addresses and payment methods exposed, according to Crypto Briefing; the air-gapped device held, the shipping list did not.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 55%
- Investor
- Investor 21%
Reality
- Evidence75
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence70
The records that expanded Trezor's breach were US orders from 2019 to 2021, held years past the 90-day deletion window its fulfillment partner had promised, which puts the failure in the contract rather than the device.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence58
The records cover orders placed between November 2019 and August 2021, years past the 90-day deletion window Trezor advertises. Trezor says it held repeated written confirmation from ShipMonk that the data was gone.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 55%
- Investor
- Investor 15%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+8
- Incentives64
- Confidence66
Brevo says an intruder reached 120 customer accounts and used them to mail phishing from those customers' own domains. Three crypto companies confirmed their newsletter lists were hit. Only one named the provider.
Perspective Coverage
4 publishers
- Builder
- Builder 15%
- Operator
- Operator 69%
- Investor
- Investor 16%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap−20
- Incentives40
- Confidence70
Trezor's spoofed alert reused the language of the $112.7m Coldcard exploit
The email telling Trezor owners their recovery phrases might lack entropy came from a real trezor.io address and passed DKIM, SPF and DMARC, and it described a defect close to the one that took 1,778.84 BTC from Coldcard users.
Reality
- Evidence42
- Adoption55
- Hype gap+22
- Incentives58
- Confidence45
Fulfilment breach exposes data of 13,689 Trezor customers, opening door to phishing
Trezor's hardware held, but its logistics vendor gave away the one input an AI phishing operation otherwise has to guess at: a payment-verified list of buyers, 11,742 of them with full contact details.
Reality
- Evidence34
- Adoption41
- Hype gap+27
- Incentives66
- Confidence37
Copilot built the fake Ledger app. A human still only made 20 lookups in two weeks.
Rapid7's Operation ASTERIX report shows the cost of building convincing wallet malware collapsing while targeting stayed manual. The durable asset is the validated list, not the code.
Reality
- Evidence58
- Adoption32
- Hype gap+26
- Incentives62
- Confidence45