Hardware Wallets

The fake alert claimed an STM32 entropy flaw in about one in four devices, a lure that lands harder six weeks after a real entropy bug drained 594 bitcoin from Coldcard wallets. BitBox users received near-identical mail the same day.

ShipMonk lost 90 days of order data to attackers who exploited a flaw in the third-party analytics tool Metabase, handing out full names, phone numbers and shipping addresses for anyone waiting on a hardware wallet.