Your signal. Your price.
A scammer who had stolen Bitcoin through a task scam lost the proceeds after moving them into three Ledger addresses that thieves emptied. The theft followed reports from Southeast Asian customers who lost funds after buying Ledger devices from a Malaysian reseller.
David Bennett promoted the BitBox02 Nova as a self-custody hardware wallet that supports iPhone, Android, Mac, Windows, and Linux. He said the device is Swiss-made and open-source, and offered a 5% discount with the code bitcoin.
Ledn’s sponsor description says customer transaction and loan-collateral assets are not lent out or used to generate yield. The pitch advertises Tether Gold and stablecoin trading, with custody protection for client assets.
Foundation sells Passport hardware and describes its tools as accessible to newcomers. Cake Wallet supports Bitcoin and Monero, node connections, coin control, Silent Payments, and in-app gift-card purchases through CakePay.
Q and A corrected his claim that BitKey exposes users’ UTXOs during normal use: chain-code delegation hides them unless recovery uses the server key. He still flags hot-key exposure and limited descriptor export; Max cited a survey where 80% to 90% of collaborative-custody users did not know how to recover funds independently.
A hardware hacker found two tampered Trezor wallets bought from unauthorized sellers: a Model T from Facebook Marketplace and a Trezor One from TikTok Shop. Both used replacement chips to generate attacker-known recovery phrases; Trezor said it knew of the counterfeit method and had no evidence of compromise in current devices bought through authorized channels.
Ledger said a criminal group implanted devices sold through Crypto Billies resellers in Southeast Asia, capturing recovery seeds and draining funds. Mark Karpeles reported similar implants in devices bought in Germany and Singapore; Ledger said it had not examined those units and confirmed thefts still traced to Crypto Billies.
Ledger announced Atom, an Android phone with a protected key-management mode, an on-device AI assistant requiring physical approval for actions, and a tamper-sensing enclosure intended to block screen-reading implants. Max and Q and A questioned the timing and whether a first-generation Ledger phone could compete with established phones.
A UK trader using the name Realist said attackers held him at knife point and forced him to transfer nearly $800,000 in crypto, including $720,000 from a Ledger. Max noted commenters linked the incident to a Revolut data leak, but said that link was unconfirmed.
Jameson Lopp’s wrench-attack archive surpassed 700 recorded incidents after AI-assisted searches added reports from local news sites and multiple languages. France accounted for 77 recorded cases so far that year; the hosts urged Bitcoin users to limit public identity and KYC exposure.
Nunchuk Android 2.9.1 added xpub export for watch-only wallets and multisig setups. Bull Bitcoin Mobile 6.14.0 isolated Tor sessions for backups and wallet traffic, moved recovery-word entry to an in-app keyboard, and added a developer-mode Silent Payments wallet.
Corsico 0.3 keeps Lightning spending keys on a separately flashed LilyGo T-Display board and confirms payments over Bluetooth; its Spark-based design lets Spark operators co-sign. KQuality 6.5 added multiple accounts per seed and a faster Fulcrum-powered sync engine, while Bitcoin C Tool 2.4.1 fixed mobile layout issues.
A listener proposed a “dumb two-of-two” setup pairing a hardware wallet with a hot wallet through a coordinator. The listener recommended backing up the hot key aggressively, but the boost was cut off, so Max and Q and A said they lacked the full rationale.
Parker Lewis said hardware and supply-chain incidents involving Coldcard and Ledger damage holder confidence, but Bitcoin’s lack of bailouts is part of its design: users and firms bear their own losses. He also cited an unnamed exchange hack that reportedly lost more than the two incidents combined.
Parker Lewis described Zaprite’s peer-to-peer app as an aggregator for existing custodial and non-custodial wallets, designed to let users push payments without exchanging wallet details or scanning QR codes. The app avoids storing individual transaction details, and its Zaprite Pay feature aims to make merchant checkout as simple as fiat payment.
The Cash App advertisement said customers can buy Bitcoin without fees on recurring purchases or purchases above $2,000, then withdraw on-chain or over Lightning at any time. It also advertised a $21 new-customer bonus for users who sign up with the stated code and send at least $5 to a friend within two weeks.
The Aven advertisement promoted a Bitcoin-backed credit line that it said does not require selling Bitcoin or rehypothecate collateral, with custody handled by BitGo. It offered fixed rates for long terms, interest-only repayment, and unlimited cash back on card spending.
Selig says spot crypto exchange licensing mostly sits with states under money-transmitter laws adopted after the Mt. Gox collapse. Those licenses provide basic payment and anti-money-laundering controls, but did not prevent FTX or ensure customer-fund segregation and market-abuse protections.
Selig says federal exchange rules separate the customer-facing broker, order-book exchange, and clearinghouse, even when firms share a parent company. The CFTC is also proposing stronger vertical-integration conflict rules, including safeguards against customer funds being used for affiliated trading or lending.
High-debt governments routinely enforce financial capital controls and exit taxes to trap domestic wealth. Roy contends Bitcoin self-custody preserves the vital right of exit, forcing governments to address budget deficits rather than raise tax rates.
French lawmakers advanced legislation requiring citizens to register self-custody wallets holding over 100,000 euros starting in December. The policy comes amid rising physical attacks targeting crypto holders, driving demand for geographically distributed multi-signature key arrangements to mitigate physical coercion.
Galaxy Digital research showed that 55.1% of the Bitcoin supply resides in addresses without known attribution, demonstrating that self-custody remains dominant despite institutional growth. Separately, Strive launched a preferred stock instrument offering a 15% fixed perpetual dividend.
Marty Bent’s Block ad described Cash App Bitcoin services, Lightning payments through Square, and Bitkey self-custody with multisignature recovery. The Aven ad promoted credit backed by Bitcoin without selling it, with fixed-rate borrowing and cash back.
Dixon advises people to reduce debt, invest regularly in assets, and build control over their money, identity, and data. He favors learning self-custody for Bitcoin and running AI models locally, while warning that fear, algorithmic feeds, and fixed ideologies make people easier to control.
SF moved away from the old bot’s shared user wallets as European rules for services that hold or transmit value grew more demanding. The current radio requires users to connect their own Lightning wallets, and SF said funds remaining in the old bot should become withdrawable.
A hardware implant in Ledger devices sold through Southeast Asian reseller CryptoBilis intercepted setup seed phrases and transmitted them to attackers; Ledger confirmed an affected device, while the hosts warn that authorized resellers and outsourced manufacturing still expose supply-chain risks.
A proposed French amendment would require residents to declare self-custody wallets above a lowered threshold; the hosts argue that a government-held inventory could expose holders to physical-security risks, especially after reported breaches of French tax infrastructure.
David Bennett argues that binding public Bitcoin wallet addresses to physical home addresses exposes crypto holders to physical home invasions and extortion. He contends centralized tax authorities lack the security needed to prevent catastrophic database breaches.
Ledger announced the $850 Adam hardware device featuring post-quantum encryption and AI agent approvals, scheduled to ship in summer 2027. The launch followed reports that Asian reseller Crypto Billis distributed compromised devices containing malicious implants.
David Bennett alleges Ledger manufactured or capitalized on news of compromised devices as a psychological marketing tactic to sell expensive new hardware. He urges users to abandon Ledger for open-source hardware wallet alternatives like BitBox.