&lt;p&gt;Sui has introduced Tessera, a private B2B settlement network designed to help companies settle invoices with stablecoins without publicly exposing payment amounts. Developed by Mysten Labs, the prototype combines Sui&amp;rsquo;s Confidential Transfers technology with Seal multi-party computation (MPC) to balance commercial privacy, regulatory oversight, and blockchain-based settlement.&lt;/p&gt;
&lt;p&gt;The announcement comes as financial institutions increasingly explore stablecoins for faster cross-border payments and treasury operations. However, public blockchains often reveal transaction values, allowing competitors and other market participants to monitor pricing, payment volumes, and corporate cash movements. Sui says this lack of privacy has been a major obstacle to wider blockchain adoption in business payments.&lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;https://ds7uldi88krbs.cloudfront.net/posts/post_6a7b0b1595f08.png&quot; alt=&quot;Sui Introduces Tessera for Private B2B Stablecoin Settlements&quot; width=&quot;274&quot; height=&quot;300&quot;&gt;&lt;/p&gt;
&lt;h1&gt;How Tessera Protects Corporate Payments&lt;/h1&gt;
&lt;p&gt;Tessera is designed as a closed settlement network for KYC-approved businesses. Participating companies can use a confidential stablecoin to settle invoices while the blockchain continues to record the sender, recipient, and transaction time. The key difference is that the payment amount remains encrypted for outside observers. A supplier and its customer can view the relevant transaction details, but an unrelated company monitoring the network cannot see the value of the payment.&lt;/p&gt;
&lt;p&gt;This structure could help businesses protect sensitive information, including supplier pricing, trade volumes, payroll data, treasury movements, and commercial agreements. Tessera supports both one-time payments and recurring payment channels, making it potentially useful for regular invoices and ongoing business relationships.&lt;/p&gt;
&lt;h1&gt;Compliance Remains Central&lt;/h1&gt;
&lt;p&gt;Tessera is not designed as an anonymous payment network. Access is restricted to verified businesses, while authorized third parties can receive limited access to transaction information when necessary. Seal MPC enables permission-based access to encrypted payment data. For example, a regulator may be allowed to review activity across the network, while a tax authority could receive access only to records connected to a specific company. An arbitrator might be given temporary access to a disputed payment while a commercial disagreement is being resolved.&lt;/p&gt;
&lt;p&gt;According to the available details, these permissions can be scoped, time-limited, and revoked. Authorized viewers can inspect transaction data, but they do not gain the ability to move the underlying funds. This approach is intended to give enterprises privacy without removing auditability and regulatory controls.&lt;/p&gt;
&lt;h1&gt;Sui&amp;rsquo;s Growing Payments Strategy&lt;/h1&gt;
&lt;p&gt;Tessera forms part of Sui&amp;rsquo;s broader push into institutional payments and stablecoin infrastructure. Sui&amp;rsquo;s payments platform highlights subsecond settlement, gasless stablecoin transfers, programmable payment logic, and high-throughput transaction processing. The network currently advertises approximately 300-millisecond finality and capacity of up to 20,000 transactions per second, with a reported 297,000 consensus-based transactions per second under benchmark conditions. Sui&amp;rsquo;s website also reports $36 billion in stablecoin utilization for April 2026.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;The network positions its infrastructure as a way for companies to move stablecoins without managing a separate gas token, while connecting settled capital to wallets, fiat on-ramps, and decentralized finance applications. These features could make Sui attractive for companies seeking faster settlement than traditional correspondent banking systems. Nevertheless, payment speed alone is not enough for institutional adoption. Businesses also require clear legal frameworks, reliable stablecoin liquidity, strong custody systems, and integration with existing accounting and enterprise resource planning software.&lt;/p&gt;
&lt;h1&gt;Prototype Status and Next Steps&lt;/h1&gt;
&lt;p&gt;Tessera remains a prototype, rather than a fully launched commercial network. Sui has not publicly disclosed a launch date, participating companies, stablecoin issuer, or initial deployment jurisdiction. SUI was trading at approximately $0.69 following the announcement, within a reported 24-hour range of roughly $0.684 to $0.704. The token showed no clear price reaction directly linked to the Tessera announcement.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;The project&amp;rsquo;s next major test will be whether Sui can move Tessera from a controlled demonstration to a production-ready solution for regulated companies. If it succeeds, confidential B2B stablecoin settlement could become an important use case for Sui and strengthen its position in the growing institutional payments market.&lt;/p&gt;

Sui Introduces Tessera for Private B2B Stablecoin Settlements

&lt;p&gt;Ethereum co-founder Vitalik Buterin has revealed how the network&amp;rsquo;s priorities have changed since its 2023 roadmap. In an update shared on August 10, 2026, Buterin compared his earlier roadmap with Ethereum&amp;rsquo;s latest development plan, known as the &amp;ldquo;Strawmap.&amp;rdquo; The updated Ethereum roadmap places greater emphasis on quantum-resistant security, native privacy, faster processing, simpler protocol design and new scaling technologies. It also introduces several concepts that were not part of Ethereum&amp;rsquo;s original 2023 plan, highlighting how quickly blockchain research and cryptography have evolved.&lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;https://ds7uldi88krbs.cloudfront.net/posts/post_6a7b079ab50e3.png&quot; alt=&quot;Vitalik Buterin Reveals Updated Roadmap for Ethereum&quot; width=&quot;436&quot; height=&quot;300&quot;&gt;&lt;/p&gt;
&lt;h1&gt;Ethereum&amp;rsquo;s New Strawmap Explained&lt;/h1&gt;
&lt;p&gt;The Strawmap is a living technical document outlining Ethereum&amp;rsquo;s potential upgrades through 2029. It currently includes seven possible network forks, following an approximate schedule of one major upgrade every six months. However, the roadmap is not a fixed release calendar. Each proposal still requires research, testing, developer agreement and community approval before it can be implemented.&lt;/p&gt;
&lt;p&gt;Buterin said the updated plan still shares significant similarities with Ethereum&amp;rsquo;s 2023 roadmap. Nevertheless, some priorities have moved higher or lower, while several earlier proposals have been replaced by newer technical approaches. The latest plan is part of the broader &amp;ldquo;Lean Ethereum&amp;rdquo; vision, which Buterin previously described as a three- to four-year effort to redesign much of the protocol. The project could become Ethereum&amp;rsquo;s most extensive technical transformation since The Merge, which moved the network from proof-of-work to proof-of-stake in 2022.&lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;https://ds7uldi88krbs.cloudfront.net/posts/post_6a7b07d4c19b5.jpg&quot; alt=&quot;Updated Roadmap for Ethereum&quot; width=&quot;251&quot; height=&quot;300&quot;&gt;&lt;img src=&quot;https://ds7uldi88krbs.cloudfront.net/posts/post_6a7b07ee2c9ab.jpg&quot; alt=&quot;Updated Roadmap for Ethereum&quot; width=&quot;398&quot; height=&quot;300&quot;&gt;&lt;/p&gt;
&lt;h1&gt;Privacy Becomes a Core Priority&lt;/h1&gt;
&lt;p&gt;One of the biggest changes is Ethereum&amp;rsquo;s growing focus on native privacy. Privacy was not a major feature of Buterin&amp;rsquo;s 2023 roadmap, but it has now become a central objective for the base layer. Proposed technologies include privacy pools, keyed nonces, recent roots and &amp;ldquo;wormholes.&amp;rdquo; These tools are designed to help users conduct transactions without exposing their complete financial history or publicly linking every wallet activity.&lt;/p&gt;
&lt;p&gt;The goal is not simply to add optional privacy features for specialised applications. Instead, Ethereum developers are exploring ways to make privacy a fundamental part of the protocol while preserving compliance options and preventing misuse. This could be important for businesses, decentralised finance users and institutions that need stronger transaction confidentiality before using public blockchains at scale.&lt;/p&gt;
&lt;h1&gt;Quantum Safety and Advanced Scaling&lt;/h1&gt;
&lt;p&gt;Quantum-resistant cryptography has also moved significantly higher on Ethereum&amp;rsquo;s priority list. Powerful quantum computers do not currently threaten the network, but future machines could challenge cryptographic systems used by blockchains today. Ethereum&amp;rsquo;s roadmap explores post-quantum signatures, hash-based cryptography and STARK-based verification systems. One proposal, known as zkzk frames, could combine post-quantum signatures with STARK aggregation to improve security and scalability. Scaling remains another major objective. The Strawmap&amp;rsquo;s long-term targets include faster finality, a more powerful layer 1 and substantially higher throughput across layer 2 networks. Native rollups, blob and gas futures, multidimensional gas pricing and specialised scaling mechanisms are among the technologies being considered.&lt;/p&gt;
&lt;h1&gt;What the Update Means for ETH Users&lt;/h1&gt;
&lt;p&gt;For users, developers and investors, the updated Ethereum roadmap signals a long-term shift toward a network that is more private, secure, scalable and easier to verify. Buterin summarised Ethereum&amp;rsquo;s future goals as becoming quantum-safe, privacy-focused, secure, censorship-resistant, highly performant and &amp;ldquo;lean.&amp;rdquo; These objectives could strengthen Ethereum&amp;rsquo;s position as infrastructure for decentralised finance, digital identity, tokenised assets and Web3 applications.&lt;/p&gt;
&lt;p&gt;However, the Strawmap should not be interpreted as a promise that every proposal will launch on schedule. Ethereum&amp;rsquo;s development remains research-driven, and priorities may change as testing progresses. For now, the roadmap offers a clear view of the network&amp;rsquo;s direction: privacy and post-quantum security are no longer distant possibilities but central parts of Ethereum&amp;rsquo;s next phase.&lt;/p&gt;

Vitalik Buterin Reveals Updated Roadmap for Ethereum

&lt;p&gt;Bitcoin hardware wallets are considered one of the safest ways to store cryptocurrency because they keep private keys offline. This protects them from many online threats, such as malware, phishing, and exchange hacks. However, the Coldcard hack showed that offline storage is only as secure as the software that creates the wallet&amp;rsquo;s keys. In late July 2026, attackers exploited a weakness in some Coldcard firmware versions and drained Bitcoin from thousands of wallets. Within a few days, estimated losses exceeded $130 million, affecting more than 7,000 wallets. The incident shows that keeping a wallet offline is not enough. Every part of the security process must work properly to keep cryptocurrency safe.&lt;/p&gt;
&lt;p data-pm-slice=&quot;0 0 []&quot;&gt;Note: The Cryptolenz editorial team will continue updating this article as new findings about the Coldcard hack emerge. Last updated on August 7, 2026.&lt;/p&gt;
&lt;h1&gt;Quick Summary&lt;/h1&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%; height: 185px;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Category&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Details&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Incident&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Coldcard Hardware Wallet Hack&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Root Cause&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Firmware entropy (random number generation) bug introduced in March 2021&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Attack Method&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Reconstruction of weak wallet seeds and private keys- no physical device access required&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Estimated Losses&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;More than $130 million in Bitcoin&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Affected Wallets&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Approximately 7,000+ addresses&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Bitcoin Network Compromised?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;No&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Firmware Patched?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Yes&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Existing Vulnerable Wallets Safe After Update?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;No - seeds must be regenerated&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Recommended Action&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Generate a brand-new wallet and migrate all funds immediately&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;h1&gt;Key Takeaways&lt;/h1&gt;
&lt;p&gt;1. A firmware flaw in Coinkite&#039;s Coldcard hardware wallet weakened the randomness used to generate wallet seeds, tracing back to a March 2021 code change.&lt;/p&gt;
&lt;p&gt;2. Attackers did not need physical access to a device, its PIN, or malware on a victim&#039;s computer; they exploited predictable seed generation to reconstruct private keys from scratch.&lt;/p&gt;
&lt;p&gt;3. Losses are estimated at $130 million+ in Bitcoin across roughly 7,300 addresses, according to Galaxy Research, TRM Labs, and CertiK.&lt;/p&gt;
&lt;p&gt;4. Coinkite has released patched firmware, but existing vulnerable seeds remain at risk until funds are moved to a brand-new wallet.&lt;/p&gt;
&lt;p&gt;5. This is being called one of the worst self-custody security failures in Bitcoin&#039;s history and a wake-up call for how &quot;offline&quot; hardware wallets are actually secured.&lt;/p&gt;
&lt;h1&gt;Table of Contents&lt;/h1&gt;
&lt;p&gt;1. What Happened: The Coldcard Hack, Explained&lt;/p&gt;
&lt;p&gt;2. Timeline of the Attack&lt;/p&gt;
&lt;p&gt;3. Why the Vulnerability Was So Dangerous&lt;/p&gt;
&lt;p&gt;4. Which Coldcard Devices Are Affected?&lt;/p&gt;
&lt;p&gt;5. Where Did the Stolen Bitcoin Go?&lt;/p&gt;
&lt;p&gt;6. Coinkite&#039;s Response&lt;/p&gt;
&lt;p&gt;7. What Should Coldcard Users Do Now?&lt;/p&gt;
&lt;p&gt;8. Does This Affect Other Hardware Wallets?&lt;/p&gt;
&lt;p&gt;9. Security Lessons for Every Crypto Investor&lt;/p&gt;
&lt;h1&gt;What Happened&lt;/h1&gt;
&lt;p&gt;The Coldcard hack wasn&#039;t an attack on Bitcoin itself, and it wasn&#039;t a case of someone physically stealing a device out of a safe. It was something far more unsettling for self-custody advocates: a software bug that made supposedly random wallet seeds predictable.&lt;/p&gt;
&lt;p&gt;Coldcard, made by Canadian company Coinkite, is one of the most popular Bitcoin-only hardware wallets on the market prized precisely because it&#039;s designed to generate and store private keys entirely offline. That&#039;s what made this incident so damaging: the flaw meant an attacker sitting anywhere in the world could reconstruct a victim&#039;s private keys without ever touching their device.&lt;/p&gt;
&lt;p&gt;Coinkite&#039;s core message to users: &quot;Updating your firmware alone does not make an existing wallet safe.&quot;&lt;/p&gt;
&lt;p&gt;Coinkite traced the root cause to a firmware and library migration made in March 2021. During that update, the process used to generate wallet seeds was unintentionally rerouted away from Coldcard&#039;s dedicated hardware random-number generator and toward a much weaker software-based fallback. On the oldest affected models, researchers estimate the effective randomness collapsed from an intended 128 bits down to roughly 40 bits, the difference between a computationally impossible brute-force attack and a feasible one. The bug sat undetected inside trusted firmware for more than five years before attackers began exploiting it at scale.&lt;/p&gt;
&lt;h2&gt;Timeline of the Attack&lt;/h2&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%; height: 74px;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Date&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Development&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;March 2021&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Vulnerable firmware/library migration introduced (root cause)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;July 29 - 31, 2026&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;First large-scale sweeps detected; 1,082 BTC drained from 1,196 addresses in 41 minutes, Coinkite CEO Rodolfo Novak publicly urges all users to move funds immediately&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Aug 2 - 7&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Losses climb to 1,367 BTC from 4,500+ addresses ($89M), TRM Labs ties losses to 1,816 BTC from 5,200+ addresses ( $116M), Galaxy Research and CertiK estimates surpass $130M across 7,300 wallets&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;The scale and speed of the very first sweep suggested the attacker had already built a large database of cracked seeds and private keys before the theft even began. Because some victims still haven&#039;t discovered their funds are gone, and investigators are still separating the original exploit from copycat activity, the final total is expected to keep climbing.&lt;/p&gt;
&lt;h2&gt;Why the Vulnerability Was So Dangerous&lt;/h2&gt;
&lt;p&gt;A standard 12-word Bitcoin seed is designed to carry about 128 bits of entropy, a number so astronomically large that guessing it is considered computationally impossible with any existing technology.&lt;/p&gt;
&lt;p&gt;The Coldcard flaw shattered that assumption for affected devices:&lt;/p&gt;
&lt;p&gt;1. Mk2 and Mk3 models: effective security fell to roughly 40 bits&lt;/p&gt;
&lt;p&gt;2. Mk4, Mk5, and Q models: partially protected by additional secure-element entropy, but still estimated at only around 72 bits instead of the intended 128&lt;/p&gt;
&lt;p&gt;Forty bits might sound like a lot, but in cryptographic terms it&#039;s a completely different category of problem. With enough computing power and knowledge of how the flawed seed-generation process worked, attackers could systematically generate candidate seeds, check them against known Bitcoin balances, and derive working private keys, all without needing the physical wallet.&lt;/p&gt;
&lt;h2&gt;The Technical Root Cause&lt;/h2&gt;
&lt;p&gt;The bug traces to a 2021 migration in which Coldcard moved its elliptic-curve cryptography to Bitcoin Core&#039;s widely trusted &amp;ldquo;libsecp256k1&amp;rdquo; library, using a new embedded library called &amp;ldquo;libNgU&amp;rdquo;. As part of that change, seed generation shifted from Coldcard&#039;s device-specific hardware RNG call to a generic software function that, due to a build configuration error, silently fell back to a weak pseudo-random number generator instead of the intended hardware entropy source. Because both the correct hardware RNG code and the flawed fallback code existed side-by-side in the firmware, the bug was easy to miss during code review; anyone auditing the source could see the secure code path without realizing wallet seeds never actually reached it.&lt;/p&gt;
&lt;h2&gt;Which Coldcard Devices Are Affected?&lt;/h2&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Device / Firmware Track&lt;/td&gt;
&lt;td&gt;Vulnerable Versions&lt;/td&gt;
&lt;td&gt;Fixed Version&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk2 / Mk3&lt;/td&gt;
&lt;td&gt;4.0.1 &amp;ndash; 4.1.9&lt;/td&gt;
&lt;td&gt;4.2.0+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk4 / Mk5 (standard)&lt;/td&gt;
&lt;td&gt;Before 5.6.0&lt;/td&gt;
&lt;td&gt;5.6.0+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk4 / Mk5 (Edge)&lt;/td&gt;
&lt;td&gt;Before 6.6.0X&lt;/td&gt;
&lt;td&gt;6.6.0X+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Q (standard)&lt;/td&gt;
&lt;td&gt;Before 1.5.0Q&lt;/td&gt;
&lt;td&gt;1.5.0Q+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Q (Edge)&lt;/td&gt;
&lt;td&gt;Before 6.6.0QX&lt;/td&gt;
&lt;td&gt;6.6.0QX+&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;Coinkite has confirmed that original Mk1 devices, along with TAPSIGNER, OPENDIME, and SATSCARD, run on different codebases and were not affected.&lt;/p&gt;
&lt;p&gt;Important: Updating your firmware today does not retroactively fix a seed that was already generated on vulnerable firmware. It only ensures any new seed you generate going forward is secure.&lt;/p&gt;
&lt;h2&gt;Where Did the Stolen Bitcoin Go?&lt;/h2&gt;
&lt;p&gt;Early on, blockchain analysts observed that most of the stolen Bitcoin was being consolidated into a relatively small number of attacker-controlled wallets, with little evidence of laundering. That began to shift by early August: on-chain trackers at CertiK identified roughly 64 BTC connected to the exploit moving through the Bitcoin mixing service Wasabi, along with around 200 ETH tied to related activity flowing into Tornado Cash. No single group has been publicly identified as responsible, and differing transaction patterns across the various attack waves suggest multiple independent actors, possibly including copycats who reverse-engineered the vulnerability after Coinkite&#039;s public disclosure.&lt;/p&gt;
&lt;h1&gt;Coinkite&#039;s Response to the Coldcard Hardware Wallet Hack&lt;/h1&gt;
&lt;p&gt;Following discovery of the vulnerability, Coinkite publicly acknowledged the issue and released a detailed technical explanation of how the bug occurred. The company emphasized that the incident was not caused by a compromise of Bitcoin itself or a breach of Coldcard&#039;s infrastructure; it stemmed from an entropy-generation error introduced during the 2021 firmware migration.&lt;/p&gt;
&lt;p&gt;To limit further damage, Coinkite has:&lt;/p&gt;
&lt;p&gt;1. Released patched firmware for all affected product lines&lt;/p&gt;
&lt;p&gt;2. Published technical documentation explaining the vulnerability&lt;/p&gt;
&lt;p&gt;3. Halted shipments of devices running vulnerable firmware&lt;/p&gt;
&lt;p&gt;4. Removed remaining vulnerable inventory from distribution&lt;/p&gt;
&lt;p&gt;5. Coordinated with blockchain security researchers and industry partners&lt;/p&gt;
&lt;p&gt;6. Begun working with law enforcement agencies investigating the theft&lt;/p&gt;
&lt;p&gt;Coinkite has also acknowledged it was unaware of the defect prior to the attacks, noting that the bug may have ultimately surfaced through AI-assisted code review even though the company&#039;s own internal AI-assisted audit earlier in 2026 failed to catch it.&lt;/p&gt;
&lt;h1&gt;What Should Coldcard Users Do Now?&lt;/h1&gt;
&lt;p&gt;If you generated a wallet on affected firmware, assume the recovery seed could eventually be reconstructed by an attacker even if your wallet hasn&#039;t been targeted yet. Migrating to a new wallet is the safest course of action.&lt;/p&gt;
&lt;p&gt;Step 1: Stop Using the Existing Wallet&lt;/p&gt;
&lt;p&gt;Do not send any new Bitcoin to addresses derived from the old seed. Every additional deposit increases your potential exposure.&lt;/p&gt;
&lt;p&gt;Step 2: Install the Latest Firmware&lt;/p&gt;
&lt;p&gt;Download and install the latest official firmware for your specific Coldcard model, obtained only from Coinkite&#039;s official channels.&lt;/p&gt;
&lt;p&gt;Step 3: Generate a Brand-New Wallet&lt;/p&gt;
&lt;p&gt;Create an entirely new recovery seed using the updated firmware, which uses the corrected entropy-generation process.&lt;/p&gt;
&lt;p&gt;Step 4: Verify the Backup&lt;/p&gt;
&lt;p&gt;Before transferring funds, confirm every recovery word, verify the wallet fingerprint and check the first receiving address displayed on the device. Small mistakes during backup can permanently lock you out of your Bitcoin.&lt;/p&gt;
&lt;p&gt;Step 5: Test the New Wallet&lt;/p&gt;
&lt;p&gt;Before moving your entire balance, send a small test amount of Bitcoin, wait for confirmations, verify the transaction arrived correctly and confirm you can access the new wallet&lt;/p&gt;
&lt;p&gt;Step 6: Transfer All Funds&lt;/p&gt;
&lt;p&gt;Once testing succeeds, move your remaining Bitcoin, double-check the destination address on the Coldcard screen and wait until every transaction is confirmed. Once complete, stop using addresses associated with the old seed entirely.&lt;/p&gt;
&lt;p&gt;Step 7: Keep the Old Recovery Phrase Safe (But Unused)&lt;/p&gt;
&lt;p&gt;Don&#039;t destroy your old seed immediately; it may still be useful for verifying historical transactions, supporting insurance or legal claims, or assisting investigations. However, never enter the old recovery phrase into a website, software wallet, browser extension, or smartphone app.&lt;/p&gt;
&lt;h1&gt;Does This Affect Other Hardware Wallets Like Ledger or Trezor?&lt;/h1&gt;
&lt;p&gt;No, based on current evidence. There is no indication this firmware vulnerability impacted other popular hardware wallets, including:&lt;/p&gt;
&lt;p&gt;1. Ledger&lt;/p&gt;
&lt;p&gt;2. Trezor&lt;/p&gt;
&lt;p&gt;3. BitBox&lt;/p&gt;
&lt;p&gt;4. Blockstream Jade&lt;/p&gt;
&lt;p&gt;5. Bitkey&lt;/p&gt;
&lt;p&gt;The vulnerability was tied to a specific firmware and build-integration path used only by certain Coldcard devices. That said, the incident is a reminder that every hardware wallet depends on more than secure hardware. Firmware quality, cryptographic implementation, testing procedures, and software supply-chain security are all essential parts of a secure self-custody solution.&lt;/p&gt;
&lt;h1&gt;Security Lessons Every Crypto Investor Should Learn&lt;/h1&gt;
&lt;p&gt;1. Offline Doesn&#039;t Mean Invulnerable&lt;/p&gt;
&lt;p&gt;Keeping private keys offline protects against many common threats, but it doesn&#039;t eliminate every risk. If the seed is generated incorrectly, an attacker may never need physical access to the device.&lt;/p&gt;
&lt;p&gt;2. Randomness Is the Foundation of Wallet Security&lt;/p&gt;
&lt;p&gt;Every Bitcoin wallet ultimately depends on one thing: a truly unpredictable recovery seed. Weak entropy can undermine even the most advanced hardware security features.&lt;/p&gt;
&lt;p&gt;3. Firmware Matters as Much as Hardware&lt;/p&gt;
&lt;p&gt;Users often focus on the physical device while overlooking firmware updates. Always install security updates promptly and monitor announcements from wallet manufacturers.&lt;/p&gt;
&lt;p&gt;4. Follow Official Security Advisories&lt;/p&gt;
&lt;p&gt;Security researchers and wallet manufacturers regularly publish vulnerability disclosures. Subscribing to official updates can help you respond quickly if a new issue is discovered.&lt;/p&gt;
&lt;p&gt;5. Consider Multisignature for Large Holdings&lt;/p&gt;
&lt;p&gt;Investors managing significant Bitcoin holdings may benefit from a multisignature (multisig) setup. By requiring approvals from multiple independent devices, multisig reduces reliance on any single hardware wallet or firmware implementation. It&#039;s more complex to manage, but it adds meaningful protection against single points of failure.&lt;/p&gt;

Coldcard Hardware Wallet Hack 2026

&lt;p&gt;MetaMask has launched Agent Wallet, a self-custodial wallet that allows ai agents to execute on-chain crypto transactions within rules set by users. The product became publicly available on August 6, 2026, following an early-access phase that began in June. MetaMask announced that Agent Wallet is now live for everyone, marking a significant expansion of AI-powered tools in decentralized finance (DeFi). Developed by Consensys, MetaMask Agent Wallet is designed for traders and developers who want AI agents to monitor markets, identify opportunities and execute transactions without requiring manual approval for every trade.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;However, the wallet does not give an AI system unrestricted control over a user&amp;rsquo;s funds. Instead, users establish spending limits, approved protocols and risk preferences before the agent begins operating. The launch comes as crypto activity increasingly moves toward automated and algorithmic execution. AI agents can process market data continuously, compare liquidity across platforms and respond to changing conditions faster than a human trader. MetaMask is positioning Agent Wallet as infrastructure for this emerging &amp;ldquo;agentic&amp;rdquo; economy, while attempting to preserve the self-custody principles associated with cryptocurrency wallets.&lt;/p&gt;
&lt;h1&gt;How Agent Wallet works&lt;/h1&gt;
&lt;p&gt;Users can connect Agent Wallet to supported AI development frameworks, including Claude Code, Codex, Cursor, OpenClaw, Hermes and OpenCode. The wallet is built around a command-line interface, allowing agents to interact with on-chain applications through structured instructions rather than a conventional point-and-click wallet interface.&lt;/p&gt;
&lt;p&gt;Agent Wallet supports a range of DeFi activities, including token swaps, perpetual futures, prediction markets, staking and liquidity provision. It operates across Hyperliquid and a growing list of Ethereum Virtual Machine-compatible networks, including Ethereum, Base, Arbitrum, Optimism, Polygon, Avalanche, BNB Chain, Linea, Sei and Monad. MetaMask has also highlighted integrations with platforms such as Polymarket, Aave, CoW Swap and LI.FI.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Users can choose between two operating modes. Guard Mode is the default setting and applies daily spending limits, allowlisted protocols and two-factor authentication for transactions that fall outside the user&amp;rsquo;s policy. Beast Mode is an opt-in setting for experienced users who want fewer interruptions and broader flexibility. Even in Beast Mode, transactions identified as malicious are blocked or sent for additional approval.&lt;/p&gt;
&lt;h1&gt;Security remains central&lt;/h1&gt;
&lt;p&gt;MetaMask says every supported EVM transaction passes through a mandatory security pipeline before execution. This includes transaction simulation, threat scanning powered by Blockaid and MEV-protected transaction processing. The system is designed to show potential balance changes, approvals and fee routes before a transaction is completed. Transactions that are flagged as suspicious, exceed spending limits or involve non-approved protocols can be paused for human review. Users receive approval requests through the MetaMask mobile application or an email link, and the agent cannot proceed until the request is accepted. Eligible transactions that pass MetaMask&amp;rsquo;s security checks may also qualify for Transaction Protection of up to $10,000 per month, subject to the company&amp;rsquo;s terms and conditions. The coverage is not a guarantee against all trading losses, and users remain responsible for understanding the risks of automated crypto trading.&lt;/p&gt;
&lt;h1&gt;Gas abstraction and user control&lt;/h1&gt;
&lt;p&gt;Another notable feature is gas abstraction. Agents can transfer or swap assets without first holding a blockchain&amp;rsquo;s native token to pay transaction fees, as MetaMask settles the network fee using the asset being moved. This could simplify automated trading across multiple networks, where managing separate gas balances has traditionally added friction. Despite the automation, Agent Wallet remains self-custodial. Users retain control of their keys and can export their recovery phrase. That distinction may be important for traders who want the speed of AI execution without placing funds under the custody of an exchange or third-party service.&lt;/p&gt;

MetaMask has launched Agent Wallet

&lt;p&gt;Hong Kong&amp;rsquo;s push to bring traditional financial markets onto blockchain infrastructure has gained new momentum with the launch of the Tokenized Securities Framework (TSF). Developed by FORMS HK in collaboration with Chainlink, Apex Group, CSpro, and Blockchain Valley, the framework is designed to support the issuance, distribution, and settlement of tokenized securities within Hong Kong&amp;rsquo;s existing regulatory environment. The initiative arrives as financial institutions worldwide explore ways to use blockchain to improve the efficiency of securities markets. Rather than treating tokenization as a standalone experiment, TSF aims to provide a common operating structure for the full lifecycle of a digital security.&lt;/p&gt;
&lt;h1&gt;A framework for regulated markets&lt;/h1&gt;
&lt;p&gt;TSF is not a new law or replacement for Hong Kong&amp;rsquo;s financial regulations. Instead, it is an industry-led infrastructure framework intended to operate within the city&amp;rsquo;s current legal and regulatory framework. The distinction is important because tokenized securities still need to comply with rules governing investor eligibility, securities dealing, custody, and market access. The framework uses the ERC-3643 permissioned token standard, which allows compliance rules to be embedded directly into the token. As a result, requirements such as investor eligibility and transfer restrictions can travel with the asset rather than being maintained solely in an external database. This approach could make it easier for regulated institutions to manage digital securities while maintaining control over who can hold and transfer them. TSF also includes an execution and distribution layer known as TS Connect. The platform is intended to connect issuers, intermediaries, and investors while supporting the movement of tokenized assets through regulated channels.&lt;/p&gt;
&lt;h1&gt;Chainlink&amp;rsquo;s role&lt;/h1&gt;
&lt;p&gt;Chainlink provides the core interoperability and compliance infrastructure underpinning the framework. Its Cross-Chain Interoperability Protocol, or CCIP, is designed to facilitate the secure transfer of tokenized assets and related information across different blockchain networks. This could be important for institutions that issue assets on permissioned blockchains but eventually seek connectivity with public networks or other financial-market platforms. Chainlink&amp;rsquo;s Automated Compliance Engine, known as ACE, contributes identity and policy-enforcement capabilities. The system includes tools designed to verify participants, enforce transaction rules, and preserve compliance requirements when assets move between supported networks. In practical terms, this gives financial institutions a way to apply regulatory controls at the infrastructure level rather than relying entirely on manual checks. Other partners are responsible for different parts of the ecosystem. FORMS HK is handling infrastructure coordination and banking-system integration, while Apex Group contributes tokenization and fund-administration capabilities. CSpro provides the regulated market-access layer, including asset origination and distribution through licensed intermediaries. Blockchain Valley connects technology companies, financial institutions, and other ecosystem participants.&lt;/p&gt;
&lt;h1&gt;Hong Kong&amp;rsquo;s broader strategy&lt;/h1&gt;
&lt;p&gt;The TSF launch comes as Hong Kong continues to expand its digital-asset and tokenization initiatives. In June, the Hong Kong Mortgage Corporation priced approximately HK$12 billion equivalent of digital bonds, including HKD and offshore yuan tranches. The issuance attracted peak orders of around HK$24 billion equivalent from more than 100 investor accounts, while distributed-ledger settlement helped reduce the settlement cycle from five business days to three. That transaction demonstrated growing institutional interest in digitally native fixed-income products. The new framework could build on that momentum by offering market participants a standardized structure for future tokenized securities offerings. However, TSF is not an immediate production-market launch. The partners plan to begin with sandbox environments, pilot transactions, and interoperability testing. The first live issuances, target asset classes, and precise ownership or participation terms have not yet been publicly detailed.&lt;/p&gt;

Hong Kong Advances Digital Securities with Chainlink

&lt;p&gt;BNB Chain has achieved ISO/IEC 27001 and ISO/IEC 27701 certifications following an independent audit by the British Standards Institution (BSI), marking a significant step in its efforts to strengthen information security and privacy management across its infrastructure. The certifications cover BNB Chain&amp;rsquo;s internal systems used to deploy and operate smart contracts, manage cryptographic keys, and oversee related operational processes. The announcement places greater emphasis on the systems and controls supporting the network rather than suggesting that every application or smart contract built on BNB Chain has been certified.&lt;/p&gt;
&lt;h1&gt;What the certifications mean&lt;/h1&gt;
&lt;p&gt;ISO/IEC 27001 is one of the most widely recognised international standards for information security management systems. It requires organisations to establish a structured framework for identifying, assessing and addressing security risks, while protecting the confidentiality, integrity and availability of information. For BNB Chain, this includes documented policies, access controls, risk-management procedures and processes for responding to security incidents. The certification indicates that these practices have been assessed against an internationally recognised framework, rather than relying solely on individual technical safeguards.&lt;/p&gt;
&lt;p&gt;ISO/IEC 27701 focuses on privacy information management. The standard provides requirements for establishing, maintaining and continually improving a Privacy Information Management System, or PIMS. It is designed to help organisations manage personally identifiable information responsibly and demonstrate accountability in the way data is collected, processed and protected. Together, the two certifications address complementary areas: ISO 27001 focuses primarily on information security, while ISO 27701 adds privacy governance and data-management requirements.&lt;/p&gt;
&lt;h1&gt;Why the milestone matters&lt;/h1&gt;
&lt;p&gt;Blockchain networks operate in an environment where security failures can have immediate financial consequences. Smart-contract exploits, compromised administrative keys, bridge vulnerabilities and poor access management have repeatedly affected the digital-asset industry. Although ISO certification cannot eliminate these risks, it can create a more consistent process for identifying and managing them. BNB Chain&amp;rsquo;s certification is particularly relevant as blockchain infrastructure becomes increasingly integrated with decentralised applications, financial services, tokenised assets and enterprise use cases. Developers, institutions and partners often require clearer evidence that an infrastructure provider has formal security and privacy processes in place. The BSI audit also adds an independent layer of assurance. BSI is the United Kingdom&amp;rsquo;s national standards body and a globally recognised certification organisation. Its assessment means the certification was based on an external review of BNB Chain&amp;rsquo;s stated systems and operating processes, rather than only an internal declaration.&lt;/p&gt;
&lt;h1&gt;Certification is not a guarantee&lt;/h1&gt;
&lt;p&gt;BNB Chain has clarified that ISO 27001 certification does not mean the network is impossible to hack. Instead, the audit evaluates how security risks are identified, how access is controlled, how incidents are handled, and whether those processes are documented and reviewed regularly. That distinction is important for users and developers. The certification applies to the audited scope of BNB Chain&amp;rsquo;s infrastructure; it does not automatically certify third-party protocols, decentralised applications or smart contracts deployed on the network. Individual projects must continue to conduct their own code reviews, audits, monitoring and incident-response planning.&lt;/p&gt;

BNB Chain Passes ISO Security and Privacy Audit

&lt;p class=&quot;mb-2 text-sm text-gray-800&quot;&gt;In partnership with Oxbull - Cryptobuddy community members will get &lt;span class=&quot;text-blue-900 font-bold&quot;&gt;10&lt;/span&gt; exclusive whitelist spots (Tier 3) for the upcoming IDO.&lt;/p&gt;&lt;p class=&quot;mb-2 text-sm text-gray-800&quot;&gt;MetaFighter is a skill-based Play-to-Earn fighting game in Binance Smart Chain Network which captures the essence of arcade fighting classics like Street Fighter, Virtua Fighter and Soul Calibur, while delivering an in -game economy that rewards players for their combat prowess. Launching on Oxbull with &lt;span class=&quot;text-blue-900 font-bold&quot;&gt;130K&lt;/span&gt; initial market cap&lt;/p&gt;

Uponly × Cryptobuddy Airdrop Giveaway

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.MetaFighter is a skill-based Play-to-Earn fighting game in Binance Smart Chain Network which captures the essence of arcade fighting classics like Street Fighter, Virtua Fighter and Soul Calibur, while delivering an in -game economy that rewards players for their combat prowess. Launching on Oxbull with 130K initial market cap

MetaFighter Oxbull IDO - Whitelist for Cryptobuddy Community

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Fantom Pad has developed the first Hybrid Incubator-DEX built on the Fantom network, creating a safer, seamless environment for all emerging projects. Launching on Oxbull with 144K initial market cap

FantomPad Oxbull IDO - Whitelist for Cryptobuddy Community

FantomPad

Oxbull

Cryptobuddy

CryptobuddyAnnouncement

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Shark Race Club is an interesting and unique NFT play-to-earn racing game that is featuring a variety of Shark NFT Characters. Launching on Oxbull with 328K initial market cap

Shark Race Club Oxbull IDO - Whitelist for Cryptobuddy Community

SharkRace Club

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Crimecash is a game where you can buy weapons and loot other players. Crimecash is launching on Oxbull

CrimeCash Oxbull IDO - Whitelist for Cryptobuddy Community

CrimeCash

Base

XYRO is an AI-powered gamified trading platform that leverages gamification and social features to redefine crypto, making it accessible and engaging. &nbsp; &nbsp; &nbsp; XYRO operates in the rapidly growing and high-potential gamified social trading and Web3 space, leveraging both AI and gamification to drive user engagement. By combining advanced AI insights with engaging gamified experiences, the platform becomes more intuitive, accessible, and appealing to a wide range of users. &nbsp; &nbsp; &nbsp; XYRO is an AI-powered, fully decentralized platform that combines gamification and social trading, making crypto participation engaging and accessible for both newcomers and experienced traders.

Zaya AI works on combating cancer through an innovative ecosystem. By seamlessly integrating the latest AI technologies with state-of-the-art medical screening procedures, they strive to revolutionize early detection, prevention, and treatment strategies. This comprehensive approach holds the promise of saving countless lives by identifying and addressing malignancies at their earliest stages when intervention is most effective.

DTRXBT by Virtuals is a token on the Base blockchain that grants holders access to exclusive AI-generated insights from the Decentralized Tech Researchers (DTR) alpha group, using advanced algorithms to find high-probability market signals.

Cryptocurrency Information Aggregator & Research Platform

Trending Cryptocurrencies

Airdrops

IDO/ICO Events

Upcoming

Recently Added

Closed

Fear and greed index

Our Articles

Sui Introduces Tessera for Private B2B Stablecoin Settlements

Vitalik Buterin Reveals Updated Roadmap for Ethereum

Coldcard Hardware Wallet Hack 2026

MetaMask has launched Agent Wallet

Hong Kong Advances Digital Securities with Chainlink

BNB Chain Passes ISO Security and Privacy Audit

Subscribe to Newsletter

Company

Quick Links

Community

Company

Quick Links

Community