The SEC withdrew its proposed expansion of crypto custody rules in 2025, so those broader requirements never took effect. Here’s what the existing rule covers—and why a provider’s control of private keys alone doesn’t determine your protections.
Read Full Article
SlowMist says the Darksword iPhone exploit chain may now reach newer iOS builds and put crypto wallet data at risk, though the iOS 26.5 claim isn’t independently confirmed. For self-custody users, the warning is simple: update fast, trust links less, and never let a phone become your seed phrase vault.
Read Full Article
A headline claims a British investor recovered 61 Bitcoin worth $4.5 million after 12 years, but the supporting evidence is thin. The scenario is believable, yet the key details behind how the coins were lost and found remain unverified.
Read Full Article
France is emerging as the main European hotspot for violent crypto “wrench attacks,” with armed home invasions, kidnappings, and threats against families pushing holders to the edge. The message is blunt: self-custody protects keys, not knives.
Read Full Article
Bitcoin self-custody is reportedly down to 49%, as ETFs, ETPs, and corporate treasuries pull more BTC into custodial hands. The shift may boost adoption and access, but it also raises the same old question: convenience and sovereignty can’t both win.
Read Full Article
New Hampshire’s HB 639 is being described as a Bitcoin self-custody rights bill, but the actual text isn’t available, so the fine print remains unknown. The idea is bullish for financial sovereignty — just don’t mistake a headline for a confirmed legal victory.
Read Full Article
Injective says its chain stayed safe after a tainted npm release reportedly targeted wallet seed phrases and private keys, not network funds. The lesson is blunt: the blockchain may be fine, but if your app touched the bad package, treat those secrets as exposed.
Read Full Article
A malicious npm release in the Injective ecosystem briefly tried to steal developers’ wallet seed phrases and private keys through a trusted SDK, proving once again that the ugliest crypto attacks often target the software around the chain, not the chain itself.
Read Full Article
A compromised Injective JavaScript SDK quietly leaked wallet private keys and seed phrases through fake telemetry, exposing a classic supply-chain attack that targeted developer trust, not the blockchain itself. 17 packages were affected before the bad release was pulled.
Read Full Article
SecondFi’s wallet-generation flaw reportedly drained 16 million ADA from 374 wallets, but Cardano’s protocol itself wasn’t compromised. The incident spotlights a brutal truth in crypto: the chain can hold, while bad wallet software still gets users wrecked.
Read Full Article