&lt;p&gt;Bitcoin hardware wallets are considered one of the safest ways to store cryptocurrency because they keep private keys offline. This protects them from many online threats, such as malware, phishing, and exchange hacks. However, the Coldcard hack showed that offline storage is only as secure as the software that creates the wallet&amp;rsquo;s keys. In late July 2026, attackers exploited a weakness in some Coldcard firmware versions and drained Bitcoin from thousands of wallets. Within a few days, estimated losses exceeded $130 million, affecting more than 7,000 wallets. The incident shows that keeping a wallet offline is not enough. Every part of the security process must work properly to keep cryptocurrency safe.&lt;/p&gt;
&lt;p data-pm-slice=&quot;0 0 []&quot;&gt;Note: The Cryptolenz editorial team will continue updating this article as new findings about the Coldcard hack emerge. Last updated on August 7, 2026.&lt;/p&gt;
&lt;h1&gt;Quick Summary&lt;/h1&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%; height: 185px;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Category&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Details&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Incident&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Coldcard Hardware Wallet Hack&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Root Cause&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Firmware entropy (random number generation) bug introduced in March 2021&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Attack Method&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Reconstruction of weak wallet seeds and private keys- no physical device access required&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Estimated Losses&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;More than $130 million in Bitcoin&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Affected Wallets&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Approximately 7,000+ addresses&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Bitcoin Network Compromised?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;No&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Firmware Patched?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Yes&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Existing Vulnerable Wallets Safe After Update?&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;No - seeds must be regenerated&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Recommended Action&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Generate a brand-new wallet and migrate all funds immediately&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;h1&gt;Key Takeaways&lt;/h1&gt;
&lt;p&gt;1. A firmware flaw in Coinkite&#039;s Coldcard hardware wallet weakened the randomness used to generate wallet seeds, tracing back to a March 2021 code change.&lt;/p&gt;
&lt;p&gt;2. Attackers did not need physical access to a device, its PIN, or malware on a victim&#039;s computer; they exploited predictable seed generation to reconstruct private keys from scratch.&lt;/p&gt;
&lt;p&gt;3. Losses are estimated at $130 million+ in Bitcoin across roughly 7,300 addresses, according to Galaxy Research, TRM Labs, and CertiK.&lt;/p&gt;
&lt;p&gt;4. Coinkite has released patched firmware, but existing vulnerable seeds remain at risk until funds are moved to a brand-new wallet.&lt;/p&gt;
&lt;p&gt;5. This is being called one of the worst self-custody security failures in Bitcoin&#039;s history and a wake-up call for how &quot;offline&quot; hardware wallets are actually secured.&lt;/p&gt;
&lt;h1&gt;Table of Contents&lt;/h1&gt;
&lt;p&gt;1. What Happened: The Coldcard Hack, Explained&lt;/p&gt;
&lt;p&gt;2. Timeline of the Attack&lt;/p&gt;
&lt;p&gt;3. Why the Vulnerability Was So Dangerous&lt;/p&gt;
&lt;p&gt;4. Which Coldcard Devices Are Affected?&lt;/p&gt;
&lt;p&gt;5. Where Did the Stolen Bitcoin Go?&lt;/p&gt;
&lt;p&gt;6. Coinkite&#039;s Response&lt;/p&gt;
&lt;p&gt;7. What Should Coldcard Users Do Now?&lt;/p&gt;
&lt;p&gt;8. Does This Affect Other Hardware Wallets?&lt;/p&gt;
&lt;p&gt;9. Security Lessons for Every Crypto Investor&lt;/p&gt;
&lt;h1&gt;What Happened&lt;/h1&gt;
&lt;p&gt;The Coldcard hack wasn&#039;t an attack on Bitcoin itself, and it wasn&#039;t a case of someone physically stealing a device out of a safe. It was something far more unsettling for self-custody advocates: a software bug that made supposedly random wallet seeds predictable.&lt;/p&gt;
&lt;p&gt;Coldcard, made by Canadian company Coinkite, is one of the most popular Bitcoin-only hardware wallets on the market prized precisely because it&#039;s designed to generate and store private keys entirely offline. That&#039;s what made this incident so damaging: the flaw meant an attacker sitting anywhere in the world could reconstruct a victim&#039;s private keys without ever touching their device.&lt;/p&gt;
&lt;p&gt;Coinkite&#039;s core message to users: &quot;Updating your firmware alone does not make an existing wallet safe.&quot;&lt;/p&gt;
&lt;p&gt;Coinkite traced the root cause to a firmware and library migration made in March 2021. During that update, the process used to generate wallet seeds was unintentionally rerouted away from Coldcard&#039;s dedicated hardware random-number generator and toward a much weaker software-based fallback. On the oldest affected models, researchers estimate the effective randomness collapsed from an intended 128 bits down to roughly 40 bits, the difference between a computationally impossible brute-force attack and a feasible one. The bug sat undetected inside trusted firmware for more than five years before attackers began exploiting it at scale.&lt;/p&gt;
&lt;h2&gt;Timeline of the Attack&lt;/h2&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%; height: 74px;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;col style=&quot;width: 50%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Date&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Development&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;March 2021&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Vulnerable firmware/library migration introduced (root cause)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;July 29 - 31, 2026&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;First large-scale sweeps detected; 1,082 BTC drained from 1,196 addresses in 41 minutes, Coinkite CEO Rodolfo Novak publicly urges all users to move funds immediately&lt;/td&gt;
&lt;/tr&gt;
&lt;tr style=&quot;height: 18.5px;&quot;&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Aug 2 - 7&lt;/td&gt;
&lt;td style=&quot;height: 18.5px;&quot;&gt;Losses climb to 1,367 BTC from 4,500+ addresses ($89M), TRM Labs ties losses to 1,816 BTC from 5,200+ addresses ( $116M), Galaxy Research and CertiK estimates surpass $130M across 7,300 wallets&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;The scale and speed of the very first sweep suggested the attacker had already built a large database of cracked seeds and private keys before the theft even began. Because some victims still haven&#039;t discovered their funds are gone, and investigators are still separating the original exploit from copycat activity, the final total is expected to keep climbing.&lt;/p&gt;
&lt;h2&gt;Why the Vulnerability Was So Dangerous&lt;/h2&gt;
&lt;p&gt;A standard 12-word Bitcoin seed is designed to carry about 128 bits of entropy, a number so astronomically large that guessing it is considered computationally impossible with any existing technology.&lt;/p&gt;
&lt;p&gt;The Coldcard flaw shattered that assumption for affected devices:&lt;/p&gt;
&lt;p&gt;1. Mk2 and Mk3 models: effective security fell to roughly 40 bits&lt;/p&gt;
&lt;p&gt;2. Mk4, Mk5, and Q models: partially protected by additional secure-element entropy, but still estimated at only around 72 bits instead of the intended 128&lt;/p&gt;
&lt;p&gt;Forty bits might sound like a lot, but in cryptographic terms it&#039;s a completely different category of problem. With enough computing power and knowledge of how the flawed seed-generation process worked, attackers could systematically generate candidate seeds, check them against known Bitcoin balances, and derive working private keys, all without needing the physical wallet.&lt;/p&gt;
&lt;h2&gt;The Technical Root Cause&lt;/h2&gt;
&lt;p&gt;The bug traces to a 2021 migration in which Coldcard moved its elliptic-curve cryptography to Bitcoin Core&#039;s widely trusted &amp;ldquo;libsecp256k1&amp;rdquo; library, using a new embedded library called &amp;ldquo;libNgU&amp;rdquo;. As part of that change, seed generation shifted from Coldcard&#039;s device-specific hardware RNG call to a generic software function that, due to a build configuration error, silently fell back to a weak pseudo-random number generator instead of the intended hardware entropy source. Because both the correct hardware RNG code and the flawed fallback code existed side-by-side in the firmware, the bug was easy to miss during code review; anyone auditing the source could see the secure code path without realizing wallet seeds never actually reached it.&lt;/p&gt;
&lt;h2&gt;Which Coldcard Devices Are Affected?&lt;/h2&gt;
&lt;table style=&quot;border-collapse: collapse; width: 100%;&quot; border=&quot;1&quot;&gt;&lt;colgroup&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;col style=&quot;width: 33.3333%;&quot;&gt;&lt;/colgroup&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Device / Firmware Track&lt;/td&gt;
&lt;td&gt;Vulnerable Versions&lt;/td&gt;
&lt;td&gt;Fixed Version&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk2 / Mk3&lt;/td&gt;
&lt;td&gt;4.0.1 &amp;ndash; 4.1.9&lt;/td&gt;
&lt;td&gt;4.2.0+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk4 / Mk5 (standard)&lt;/td&gt;
&lt;td&gt;Before 5.6.0&lt;/td&gt;
&lt;td&gt;5.6.0+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Mk4 / Mk5 (Edge)&lt;/td&gt;
&lt;td&gt;Before 6.6.0X&lt;/td&gt;
&lt;td&gt;6.6.0X+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Q (standard)&lt;/td&gt;
&lt;td&gt;Before 1.5.0Q&lt;/td&gt;
&lt;td&gt;1.5.0Q+&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Coldcard Q (Edge)&lt;/td&gt;
&lt;td&gt;Before 6.6.0QX&lt;/td&gt;
&lt;td&gt;6.6.0QX+&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;Coinkite has confirmed that original Mk1 devices, along with TAPSIGNER, OPENDIME, and SATSCARD, run on different codebases and were not affected.&lt;/p&gt;
&lt;p&gt;Important: Updating your firmware today does not retroactively fix a seed that was already generated on vulnerable firmware. It only ensures any new seed you generate going forward is secure.&lt;/p&gt;
&lt;h2&gt;Where Did the Stolen Bitcoin Go?&lt;/h2&gt;
&lt;p&gt;Early on, blockchain analysts observed that most of the stolen Bitcoin was being consolidated into a relatively small number of attacker-controlled wallets, with little evidence of laundering. That began to shift by early August: on-chain trackers at CertiK identified roughly 64 BTC connected to the exploit moving through the Bitcoin mixing service Wasabi, along with around 200 ETH tied to related activity flowing into Tornado Cash. No single group has been publicly identified as responsible, and differing transaction patterns across the various attack waves suggest multiple independent actors, possibly including copycats who reverse-engineered the vulnerability after Coinkite&#039;s public disclosure.&lt;/p&gt;
&lt;h1&gt;Coinkite&#039;s Response to the Coldcard Hardware Wallet Hack&lt;/h1&gt;
&lt;p&gt;Following discovery of the vulnerability, Coinkite publicly acknowledged the issue and released a detailed technical explanation of how the bug occurred. The company emphasized that the incident was not caused by a compromise of Bitcoin itself or a breach of Coldcard&#039;s infrastructure; it stemmed from an entropy-generation error introduced during the 2021 firmware migration.&lt;/p&gt;
&lt;p&gt;To limit further damage, Coinkite has:&lt;/p&gt;
&lt;p&gt;1. Released patched firmware for all affected product lines&lt;/p&gt;
&lt;p&gt;2. Published technical documentation explaining the vulnerability&lt;/p&gt;
&lt;p&gt;3. Halted shipments of devices running vulnerable firmware&lt;/p&gt;
&lt;p&gt;4. Removed remaining vulnerable inventory from distribution&lt;/p&gt;
&lt;p&gt;5. Coordinated with blockchain security researchers and industry partners&lt;/p&gt;
&lt;p&gt;6. Begun working with law enforcement agencies investigating the theft&lt;/p&gt;
&lt;p&gt;Coinkite has also acknowledged it was unaware of the defect prior to the attacks, noting that the bug may have ultimately surfaced through AI-assisted code review even though the company&#039;s own internal AI-assisted audit earlier in 2026 failed to catch it.&lt;/p&gt;
&lt;h1&gt;What Should Coldcard Users Do Now?&lt;/h1&gt;
&lt;p&gt;If you generated a wallet on affected firmware, assume the recovery seed could eventually be reconstructed by an attacker even if your wallet hasn&#039;t been targeted yet. Migrating to a new wallet is the safest course of action.&lt;/p&gt;
&lt;p&gt;Step 1: Stop Using the Existing Wallet&lt;/p&gt;
&lt;p&gt;Do not send any new Bitcoin to addresses derived from the old seed. Every additional deposit increases your potential exposure.&lt;/p&gt;
&lt;p&gt;Step 2: Install the Latest Firmware&lt;/p&gt;
&lt;p&gt;Download and install the latest official firmware for your specific Coldcard model, obtained only from Coinkite&#039;s official channels.&lt;/p&gt;
&lt;p&gt;Step 3: Generate a Brand-New Wallet&lt;/p&gt;
&lt;p&gt;Create an entirely new recovery seed using the updated firmware, which uses the corrected entropy-generation process.&lt;/p&gt;
&lt;p&gt;Step 4: Verify the Backup&lt;/p&gt;
&lt;p&gt;Before transferring funds, confirm every recovery word, verify the wallet fingerprint and check the first receiving address displayed on the device. Small mistakes during backup can permanently lock you out of your Bitcoin.&lt;/p&gt;
&lt;p&gt;Step 5: Test the New Wallet&lt;/p&gt;
&lt;p&gt;Before moving your entire balance, send a small test amount of Bitcoin, wait for confirmations, verify the transaction arrived correctly and confirm you can access the new wallet&lt;/p&gt;
&lt;p&gt;Step 6: Transfer All Funds&lt;/p&gt;
&lt;p&gt;Once testing succeeds, move your remaining Bitcoin, double-check the destination address on the Coldcard screen and wait until every transaction is confirmed. Once complete, stop using addresses associated with the old seed entirely.&lt;/p&gt;
&lt;p&gt;Step 7: Keep the Old Recovery Phrase Safe (But Unused)&lt;/p&gt;
&lt;p&gt;Don&#039;t destroy your old seed immediately; it may still be useful for verifying historical transactions, supporting insurance or legal claims, or assisting investigations. However, never enter the old recovery phrase into a website, software wallet, browser extension, or smartphone app.&lt;/p&gt;
&lt;h1&gt;Does This Affect Other Hardware Wallets Like Ledger or Trezor?&lt;/h1&gt;
&lt;p&gt;No, based on current evidence. There is no indication this firmware vulnerability impacted other popular hardware wallets, including:&lt;/p&gt;
&lt;p&gt;1. Ledger&lt;/p&gt;
&lt;p&gt;2. Trezor&lt;/p&gt;
&lt;p&gt;3. BitBox&lt;/p&gt;
&lt;p&gt;4. Blockstream Jade&lt;/p&gt;
&lt;p&gt;5. Bitkey&lt;/p&gt;
&lt;p&gt;The vulnerability was tied to a specific firmware and build-integration path used only by certain Coldcard devices. That said, the incident is a reminder that every hardware wallet depends on more than secure hardware. Firmware quality, cryptographic implementation, testing procedures, and software supply-chain security are all essential parts of a secure self-custody solution.&lt;/p&gt;
&lt;h1&gt;Security Lessons Every Crypto Investor Should Learn&lt;/h1&gt;
&lt;p&gt;1. Offline Doesn&#039;t Mean Invulnerable&lt;/p&gt;
&lt;p&gt;Keeping private keys offline protects against many common threats, but it doesn&#039;t eliminate every risk. If the seed is generated incorrectly, an attacker may never need physical access to the device.&lt;/p&gt;
&lt;p&gt;2. Randomness Is the Foundation of Wallet Security&lt;/p&gt;
&lt;p&gt;Every Bitcoin wallet ultimately depends on one thing: a truly unpredictable recovery seed. Weak entropy can undermine even the most advanced hardware security features.&lt;/p&gt;
&lt;p&gt;3. Firmware Matters as Much as Hardware&lt;/p&gt;
&lt;p&gt;Users often focus on the physical device while overlooking firmware updates. Always install security updates promptly and monitor announcements from wallet manufacturers.&lt;/p&gt;
&lt;p&gt;4. Follow Official Security Advisories&lt;/p&gt;
&lt;p&gt;Security researchers and wallet manufacturers regularly publish vulnerability disclosures. Subscribing to official updates can help you respond quickly if a new issue is discovered.&lt;/p&gt;
&lt;p&gt;5. Consider Multisignature for Large Holdings&lt;/p&gt;
&lt;p&gt;Investors managing significant Bitcoin holdings may benefit from a multisignature (multisig) setup. By requiring approvals from multiple independent devices, multisig reduces reliance on any single hardware wallet or firmware implementation. It&#039;s more complex to manage, but it adds meaningful protection against single points of failure.&lt;/p&gt;

Coldcard Hardware Wallet Hack 2026

&lt;p&gt;MetaMask has launched Agent Wallet, a self-custodial wallet that allows ai agents to execute on-chain crypto transactions within rules set by users. The product became publicly available on August 6, 2026, following an early-access phase that began in June. MetaMask announced that Agent Wallet is now live for everyone, marking a significant expansion of AI-powered tools in decentralized finance (DeFi). Developed by Consensys, MetaMask Agent Wallet is designed for traders and developers who want AI agents to monitor markets, identify opportunities and execute transactions without requiring manual approval for every trade.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;However, the wallet does not give an AI system unrestricted control over a user&amp;rsquo;s funds. Instead, users establish spending limits, approved protocols and risk preferences before the agent begins operating. The launch comes as crypto activity increasingly moves toward automated and algorithmic execution. AI agents can process market data continuously, compare liquidity across platforms and respond to changing conditions faster than a human trader. MetaMask is positioning Agent Wallet as infrastructure for this emerging &amp;ldquo;agentic&amp;rdquo; economy, while attempting to preserve the self-custody principles associated with cryptocurrency wallets.&lt;/p&gt;
&lt;h1&gt;How Agent Wallet works&lt;/h1&gt;
&lt;p&gt;Users can connect Agent Wallet to supported AI development frameworks, including Claude Code, Codex, Cursor, OpenClaw, Hermes and OpenCode. The wallet is built around a command-line interface, allowing agents to interact with on-chain applications through structured instructions rather than a conventional point-and-click wallet interface.&lt;/p&gt;
&lt;p&gt;Agent Wallet supports a range of DeFi activities, including token swaps, perpetual futures, prediction markets, staking and liquidity provision. It operates across Hyperliquid and a growing list of Ethereum Virtual Machine-compatible networks, including Ethereum, Base, Arbitrum, Optimism, Polygon, Avalanche, BNB Chain, Linea, Sei and Monad. MetaMask has also highlighted integrations with platforms such as Polymarket, Aave, CoW Swap and LI.FI.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Users can choose between two operating modes. Guard Mode is the default setting and applies daily spending limits, allowlisted protocols and two-factor authentication for transactions that fall outside the user&amp;rsquo;s policy. Beast Mode is an opt-in setting for experienced users who want fewer interruptions and broader flexibility. Even in Beast Mode, transactions identified as malicious are blocked or sent for additional approval.&lt;/p&gt;
&lt;h1&gt;Security remains central&lt;/h1&gt;
&lt;p&gt;MetaMask says every supported EVM transaction passes through a mandatory security pipeline before execution. This includes transaction simulation, threat scanning powered by Blockaid and MEV-protected transaction processing. The system is designed to show potential balance changes, approvals and fee routes before a transaction is completed. Transactions that are flagged as suspicious, exceed spending limits or involve non-approved protocols can be paused for human review. Users receive approval requests through the MetaMask mobile application or an email link, and the agent cannot proceed until the request is accepted. Eligible transactions that pass MetaMask&amp;rsquo;s security checks may also qualify for Transaction Protection of up to $10,000 per month, subject to the company&amp;rsquo;s terms and conditions. The coverage is not a guarantee against all trading losses, and users remain responsible for understanding the risks of automated crypto trading.&lt;/p&gt;
&lt;h1&gt;Gas abstraction and user control&lt;/h1&gt;
&lt;p&gt;Another notable feature is gas abstraction. Agents can transfer or swap assets without first holding a blockchain&amp;rsquo;s native token to pay transaction fees, as MetaMask settles the network fee using the asset being moved. This could simplify automated trading across multiple networks, where managing separate gas balances has traditionally added friction. Despite the automation, Agent Wallet remains self-custodial. Users retain control of their keys and can export their recovery phrase. That distinction may be important for traders who want the speed of AI execution without placing funds under the custody of an exchange or third-party service.&lt;/p&gt;

MetaMask has launched Agent Wallet

&lt;p&gt;Hong Kong&amp;rsquo;s push to bring traditional financial markets onto blockchain infrastructure has gained new momentum with the launch of the Tokenized Securities Framework (TSF). Developed by FORMS HK in collaboration with Chainlink, Apex Group, CSpro, and Blockchain Valley, the framework is designed to support the issuance, distribution, and settlement of tokenized securities within Hong Kong&amp;rsquo;s existing regulatory environment. The initiative arrives as financial institutions worldwide explore ways to use blockchain to improve the efficiency of securities markets. Rather than treating tokenization as a standalone experiment, TSF aims to provide a common operating structure for the full lifecycle of a digital security.&lt;/p&gt;
&lt;h1&gt;A framework for regulated markets&lt;/h1&gt;
&lt;p&gt;TSF is not a new law or replacement for Hong Kong&amp;rsquo;s financial regulations. Instead, it is an industry-led infrastructure framework intended to operate within the city&amp;rsquo;s current legal and regulatory framework. The distinction is important because tokenized securities still need to comply with rules governing investor eligibility, securities dealing, custody, and market access. The framework uses the ERC-3643 permissioned token standard, which allows compliance rules to be embedded directly into the token. As a result, requirements such as investor eligibility and transfer restrictions can travel with the asset rather than being maintained solely in an external database. This approach could make it easier for regulated institutions to manage digital securities while maintaining control over who can hold and transfer them. TSF also includes an execution and distribution layer known as TS Connect. The platform is intended to connect issuers, intermediaries, and investors while supporting the movement of tokenized assets through regulated channels.&lt;/p&gt;
&lt;h1&gt;Chainlink&amp;rsquo;s role&lt;/h1&gt;
&lt;p&gt;Chainlink provides the core interoperability and compliance infrastructure underpinning the framework. Its Cross-Chain Interoperability Protocol, or CCIP, is designed to facilitate the secure transfer of tokenized assets and related information across different blockchain networks. This could be important for institutions that issue assets on permissioned blockchains but eventually seek connectivity with public networks or other financial-market platforms. Chainlink&amp;rsquo;s Automated Compliance Engine, known as ACE, contributes identity and policy-enforcement capabilities. The system includes tools designed to verify participants, enforce transaction rules, and preserve compliance requirements when assets move between supported networks. In practical terms, this gives financial institutions a way to apply regulatory controls at the infrastructure level rather than relying entirely on manual checks. Other partners are responsible for different parts of the ecosystem. FORMS HK is handling infrastructure coordination and banking-system integration, while Apex Group contributes tokenization and fund-administration capabilities. CSpro provides the regulated market-access layer, including asset origination and distribution through licensed intermediaries. Blockchain Valley connects technology companies, financial institutions, and other ecosystem participants.&lt;/p&gt;
&lt;h1&gt;Hong Kong&amp;rsquo;s broader strategy&lt;/h1&gt;
&lt;p&gt;The TSF launch comes as Hong Kong continues to expand its digital-asset and tokenization initiatives. In June, the Hong Kong Mortgage Corporation priced approximately HK$12 billion equivalent of digital bonds, including HKD and offshore yuan tranches. The issuance attracted peak orders of around HK$24 billion equivalent from more than 100 investor accounts, while distributed-ledger settlement helped reduce the settlement cycle from five business days to three. That transaction demonstrated growing institutional interest in digitally native fixed-income products. The new framework could build on that momentum by offering market participants a standardized structure for future tokenized securities offerings. However, TSF is not an immediate production-market launch. The partners plan to begin with sandbox environments, pilot transactions, and interoperability testing. The first live issuances, target asset classes, and precise ownership or participation terms have not yet been publicly detailed.&lt;/p&gt;

Hong Kong Advances Digital Securities with Chainlink

&lt;p&gt;BNB Chain has achieved ISO/IEC 27001 and ISO/IEC 27701 certifications following an independent audit by the British Standards Institution (BSI), marking a significant step in its efforts to strengthen information security and privacy management across its infrastructure. The certifications cover BNB Chain&amp;rsquo;s internal systems used to deploy and operate smart contracts, manage cryptographic keys, and oversee related operational processes. The announcement places greater emphasis on the systems and controls supporting the network rather than suggesting that every application or smart contract built on BNB Chain has been certified.&lt;/p&gt;
&lt;h1&gt;What the certifications mean&lt;/h1&gt;
&lt;p&gt;ISO/IEC 27001 is one of the most widely recognised international standards for information security management systems. It requires organisations to establish a structured framework for identifying, assessing and addressing security risks, while protecting the confidentiality, integrity and availability of information. For BNB Chain, this includes documented policies, access controls, risk-management procedures and processes for responding to security incidents. The certification indicates that these practices have been assessed against an internationally recognised framework, rather than relying solely on individual technical safeguards.&lt;/p&gt;
&lt;p&gt;ISO/IEC 27701 focuses on privacy information management. The standard provides requirements for establishing, maintaining and continually improving a Privacy Information Management System, or PIMS. It is designed to help organisations manage personally identifiable information responsibly and demonstrate accountability in the way data is collected, processed and protected. Together, the two certifications address complementary areas: ISO 27001 focuses primarily on information security, while ISO 27701 adds privacy governance and data-management requirements.&lt;/p&gt;
&lt;h1&gt;Why the milestone matters&lt;/h1&gt;
&lt;p&gt;Blockchain networks operate in an environment where security failures can have immediate financial consequences. Smart-contract exploits, compromised administrative keys, bridge vulnerabilities and poor access management have repeatedly affected the digital-asset industry. Although ISO certification cannot eliminate these risks, it can create a more consistent process for identifying and managing them. BNB Chain&amp;rsquo;s certification is particularly relevant as blockchain infrastructure becomes increasingly integrated with decentralised applications, financial services, tokenised assets and enterprise use cases. Developers, institutions and partners often require clearer evidence that an infrastructure provider has formal security and privacy processes in place. The BSI audit also adds an independent layer of assurance. BSI is the United Kingdom&amp;rsquo;s national standards body and a globally recognised certification organisation. Its assessment means the certification was based on an external review of BNB Chain&amp;rsquo;s stated systems and operating processes, rather than only an internal declaration.&lt;/p&gt;
&lt;h1&gt;Certification is not a guarantee&lt;/h1&gt;
&lt;p&gt;BNB Chain has clarified that ISO 27001 certification does not mean the network is impossible to hack. Instead, the audit evaluates how security risks are identified, how access is controlled, how incidents are handled, and whether those processes are documented and reviewed regularly. That distinction is important for users and developers. The certification applies to the audited scope of BNB Chain&amp;rsquo;s infrastructure; it does not automatically certify third-party protocols, decentralised applications or smart contracts deployed on the network. Individual projects must continue to conduct their own code reviews, audits, monitoring and incident-response planning.&lt;/p&gt;

BNB Chain Passes ISO Security and Privacy Audit

&lt;p&gt;Binance has launched Lite Loan, a bitcoin-backed borrowing product that lets eligible users access up to 1,000 USDT without selling their BTC. It is designed for short-term liquidity, and for the first 30 days, borrowers are protected from price-triggered liquidation.binance+1&lt;/p&gt;
&lt;h1&gt;What Binance launched&lt;/h1&gt;
&lt;p&gt;Lite Loan is a new Binance lending feature built around BTC as collateral and USDT as the borrowed asset. Binance says the product is aimed at users who need small, quick liquidity for trading or payments, while keeping their bitcoin exposure intact. The loan term is 30 days, with a 0.5% promotional upfront fee running until September 3, 2026, after which the standard fee rises to 1%. Binance also says users can keep BTC in Simple Earn Flexible products and continue earning yield while the loan is active.&lt;/p&gt;
&lt;h1&gt;Why it matters&lt;/h1&gt;
&lt;p&gt;The main appeal is simple: users can unlock cash-like liquidity without selling bitcoin. That makes the product attractive to traders who want access to funds for short-term opportunities, but do not want to close out long-term BTC positions. Binance is also positioning Lite Loan as a low-friction product, with borrowing available on both web and mobile. The exchange says no LTV management is required during the initial 30-day period, which removes one of the most stressful parts of typical crypto-backed lending.&lt;/p&gt;
&lt;h1&gt;Key details&lt;/h1&gt;
&lt;p&gt;1. Borrow asset: USDT.&lt;/p&gt;
&lt;p&gt;2. Collateral asset: BTC.&lt;/p&gt;
&lt;p&gt;3. Borrow cap per user: 1,000 USDT.&lt;/p&gt;
&lt;p&gt;4. Loan term: 30 days.&lt;/p&gt;
&lt;p&gt;5. Promo fee: 0.5% until September 3, then 1% standard fee.&lt;/p&gt;
&lt;p&gt;Some reports also note that if the loan is not repaid on time, the position can continue briefly under additional terms, with penalty interest applying after expiration. That makes timely repayment important, especially for users treating the product as a short-duration liquidity bridge.&lt;/p&gt;

Binance launches bitcoin-backed Lite Loan

&lt;p&gt;Two U.S. senators are pressing the SEC to investigate President Donald Trump&amp;rsquo;s $TRUMP meme coin, arguing that the token may have enabled fraud or unjust enrichment and left retail investors exposed to steep losses. Senators Elizabeth Warren and Richard Blumenthal sent the letter to SEC Chair Paul Atkins on Monday, asking the agency to review whether the token&amp;rsquo;s promotion, ownership structure, or trading activity violated federal securities or anti-fraud rules. The demand adds another layer of political and regulatory pressure around a token that has already become one of the most controversial crypto assets tied to a public figure. According to reporting cited by lawmakers and media outlets, nearly one million wallets have collectively lost about $3.81 billion on the token, while Trump-affiliated entities reportedly received roughly $636 million in proceeds.&lt;/p&gt;
&lt;h1&gt;Why the senators are pushing for a probe&lt;/h1&gt;
&lt;p&gt;In their letter, Warren and Blumenthal described the token as a possible &amp;ldquo;illegal scam,&amp;rdquo; saying the SEC should determine whether investors were misled or whether the structure of the project allowed insiders to capture value at the expense of buyers. The lawmakers also argued that the agency has a duty to protect market integrity regardless of who is involved. Their concern centers on the dramatic collapse in the coin&amp;rsquo;s value. Reports indicate that $TRUMP surged to a market value of around $9 billion shortly after launch in January 2025, before falling sharply and leaving late buyers with major losses. The senators say that pattern raises red flags about whether the token functioned more like a speculative promotion than a legitimate digital asset.&lt;/p&gt;
&lt;h1&gt;SEC guidance complicates the case&lt;/h1&gt;
&lt;p&gt;The request comes at an awkward time for regulators because the SEC itself issued guidance in February 2025 saying meme coins are generally not securities and do not fall under federal securities laws. That guidance also said buyers and holders of meme coins are not protected under those laws. However, the same guidance left room for case-by-case review if a project is using the meme-coin label to evade securities laws. That exception is important here, because the senators are effectively asking the SEC to test whether $TRUMP fits within a protected meme-coin category or whether it crosses into fraud territory.&lt;/p&gt;
&lt;h1&gt;Political and market fallout&lt;/h1&gt;
&lt;p&gt;The controversy is unfolding against a broader backdrop of scrutiny over Trump-linked crypto activity. Recent reporting has also highlighted other Trump-related financial moves, including transfers of Bitcoin by Trump Media-linked wallets and rising criticism over the intersection of politics, influence, and digital assets. For the crypto market, the bigger issue is precedent. If the SEC opens a formal probe, it could affect how politically branded tokens are marketed, promoted, and regulated in the future. Even if the agency decides not to act, the senators&amp;rsquo; letter signals that meme coins tied to public figures may face more legal and reputational risk than the average speculative token.&lt;/p&gt;

Senators Demand SEC Investigation Into TRUMP Coin

&lt;p class=&quot;mb-2 text-sm text-gray-800&quot;&gt;In partnership with Oxbull - Cryptobuddy community members will get &lt;span class=&quot;text-blue-900 font-bold&quot;&gt;10&lt;/span&gt; exclusive whitelist spots (Tier 3) for the upcoming IDO.&lt;/p&gt;&lt;p class=&quot;mb-2 text-sm text-gray-800&quot;&gt;MetaFighter is a skill-based Play-to-Earn fighting game in Binance Smart Chain Network which captures the essence of arcade fighting classics like Street Fighter, Virtua Fighter and Soul Calibur, while delivering an in -game economy that rewards players for their combat prowess. Launching on Oxbull with &lt;span class=&quot;text-blue-900 font-bold&quot;&gt;130K&lt;/span&gt; initial market cap&lt;/p&gt;

Uponly × Cryptobuddy Airdrop Giveaway

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.MetaFighter is a skill-based Play-to-Earn fighting game in Binance Smart Chain Network which captures the essence of arcade fighting classics like Street Fighter, Virtua Fighter and Soul Calibur, while delivering an in -game economy that rewards players for their combat prowess. Launching on Oxbull with 130K initial market cap

MetaFighter Oxbull IDO - Whitelist for Cryptobuddy Community

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Fantom Pad has developed the first Hybrid Incubator-DEX built on the Fantom network, creating a safer, seamless environment for all emerging projects. Launching on Oxbull with 144K initial market cap

FantomPad Oxbull IDO - Whitelist for Cryptobuddy Community

FantomPad

Oxbull

Cryptobuddy

CryptobuddyAnnouncement

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Shark Race Club is an interesting and unique NFT play-to-earn racing game that is featuring a variety of Shark NFT Characters. Launching on Oxbull with 328K initial market cap

Shark Race Club Oxbull IDO - Whitelist for Cryptobuddy Community

SharkRace Club

In partnership with Oxbull - Cryptobuddy community members will get 10 exclusive whitelist spots (Tier 3) for the upcoming IDO.Crimecash is a game where you can buy weapons and loot other players. Crimecash is launching on Oxbull

CrimeCash Oxbull IDO - Whitelist for Cryptobuddy Community

CrimeCash

Base

XYRO is an AI-powered gamified trading platform that leverages gamification and social features to redefine crypto, making it accessible and engaging. &nbsp; &nbsp; &nbsp; XYRO operates in the rapidly growing and high-potential gamified social trading and Web3 space, leveraging both AI and gamification to drive user engagement. By combining advanced AI insights with engaging gamified experiences, the platform becomes more intuitive, accessible, and appealing to a wide range of users. &nbsp; &nbsp; &nbsp; XYRO is an AI-powered, fully decentralized platform that combines gamification and social trading, making crypto participation engaging and accessible for both newcomers and experienced traders.

Zaya AI works on combating cancer through an innovative ecosystem. By seamlessly integrating the latest AI technologies with state-of-the-art medical screening procedures, they strive to revolutionize early detection, prevention, and treatment strategies. This comprehensive approach holds the promise of saving countless lives by identifying and addressing malignancies at their earliest stages when intervention is most effective.

DTRXBT by Virtuals is a token on the Base blockchain that grants holders access to exclusive AI-generated insights from the Decentralized Tech Researchers (DTR) alpha group, using advanced algorithms to find high-probability market signals.

Cryptocurrency Information Aggregator & Research Platform

Trending Cryptocurrencies

Airdrops

IDO/ICO Events

Upcoming

Recently Added

Closed

Fear and greed index

Our Articles

Coldcard Hardware Wallet Hack 2026

MetaMask has launched Agent Wallet

Hong Kong Advances Digital Securities with Chainlink

BNB Chain Passes ISO Security and Privacy Audit

Binance launches bitcoin-backed Lite Loan

Senators Demand SEC Investigation Into TRUMP Coin

Subscribe to Newsletter

Company

Quick Links

Community

Company

Quick Links

Community