COLDCARD says its official X account posted a phishing link on October 11, despite offline two-factor protection the wallet maker has used since 2017. With no explanation yet from COLDCARD or X, a security alert seen on social media is worth acting on only once the maker's own website repeats it.
Perspective Coverage
5 publishers
- Builder
- Builder 15%
- Operator
- Operator 48%
- Investor
- Investor 37%
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence60
DeFiLlama says months of trademark reports achieved nothing, so it fed a funded wallet to the impersonator. Brand enforcement on the App Store now looks like a cost line, not a right.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives40
- Confidence50
Roughly 40,000 SafePal customers had names, addresses and payment methods exposed, according to Crypto Briefing; the air-gapped device held, the shipping list did not.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 55%
- Investor
- Investor 21%
Reality
- Evidence75
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence70
The records that expanded Trezor's breach were US orders from 2019 to 2021, held years past the 90-day deletion window its fulfillment partner had promised, which puts the failure in the contract rather than the device.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence58
One SAML flaw let an attacker export the contact lists of 43 Brevo customers
Brevo closed the SAML vector and reset active sessions by about 8:30 UTC on 10 September. Six of the 138 breached accounts sent phishing mail, and Trezor counted roughly 347,000 recipients in a single day.
Reality
- Evidence48
- Adoption62
- Hype gap+12
- Incentives55
- Confidence45