CCO @Trezor | Ethos Maxi | The future belongs to those who invest in it.
North Pole
- Tweets 1,644
- Following 1,467
- Followers 2,606
- Likes 11,156
My heart goes out to everyone who lost bitcoin in the Coldcard hack. That is a real gut punch, and no one should have to go through it.
Seeing a lot of people freaking out and questioning the whole idea of self-custody because of it.
One company made a serious mistake on the one job a hardware wallet has: generating solid entropy for the seed. That hurts so many real people. At the same time, it does not mean self-custody is broken, even though it might feel like it today.
Self-custody is and will always be the point. You hold the keys. No third party that can freeze, lose, or seize your bitcoin. That is what makes this different from the old system.
Also, for many people, a simple single-sig setup does the job well. One seed, written down properly and stored safely. Clear and manageable. Countless people also lose bitcoin through their own mistakes rather than sophisticated attacks. Lost seeds, forgotten passphrases, botched setups. Adding layers of complexity also gives more places to mess up.
If your stack grows or your threat model changes, it off course makes sense to step up. Multi-sig, a strong passphrase, extra entropy measures. Match the complexity to the amount and the risk. That is a smart upgrade path, not a rejection of the simpler tools that work better for a large number of people.
Be careful not to overcorrect. Do not throw away practical self-custody for setups that are hard to maintain, or even worse, hand the keys to someone else who has already proven they can lose them too.
Hold your own keys. Keep the setup as simple as your risk allows. Verify everything.
45
77
622
58,046
Danny retweeted
mmyeah .. it was just a matter time .. good things you guys at XAPO restrict normal user funds but can't handle your security .. classic .. who would have thought ..
2
2
2
268
Danny retweeted
Bitget just got hacked for over $170 million. Expected many more of these hacks going forward…. Especially with hot wallets.
I use a @Trezor for cold storage. Not sponsored. I just want people to be safe.
[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026
At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately.
What we have confirmed:
-Estimated funds affected: approximately $351.6 million
-Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.
-User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million
Actions we have taken:
-Emergency response team activated within minutes of detection
-Abnormal transfer addresses identified, flagged, and reported
-Withdrawals temporarily suspended as a precautionary measure, pending security review
-Law enforcement and on-chain security firms have been formally notified and are engaged
What this means for you:
-Your account balances are accurate and your assets are protected
-Deposits and trading remain fully operational
Withdrawals are temporarily paused and will be restored as soon as the security review is complete
-What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete.
Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full.
Updates will be posted here and across all official Bitget channels as they become available.
— Gracy Chen, CEO, Bitget
16
10
124
8,362
If you’re at @btchelevent today or tomorrow, come by our booth.
Let’s talk self-custody, Bitcoin security, privacy, and where Trezor is headed.
See you there.
6
10
65
9,525
Danny retweeted
Ehhh this is like $174M across multiple chains and cold/hot wallets sent to 0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee over the past hour.
Think @bitget hot wallet might’ve just been hacked for 20M?
something hella fishy happening on @arbitrum
Fresh wallet 0xe410…d946 just bought 7,111 ETH on Arbitrum in 6 min with 19.67M USDT0 (from a Bitget hot wallet), via UniswapX + 1inch Fusion, paying up to +5% over spot
WETH/USDC pool hit $2,870 which makes no sense if someone was just trying to buy eth
That’s just arb chain
32
36
212
142,163
Danny retweeted
Bitget Wallets Suspected of Security Breach, Over $170M in Assets Moved and Swapped to ETH
Breaking: MLM monitoring indicates that Bitget may be experiencing an ongoing wallet security incident, with three hot wallets and one cold wallet suspected to have been compromised. More than $170 million worth of assets have reportedly been moved out and swapped into ETH, with activity linked to 0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee. The affected wallets are said to still hold about $530 million in assets. The attack vector and total losses remain unconfirmed, and Bitget has not yet publicly responded.
57
93
421
116,643
Another hot wallet seems to be getting hacked.
Just after Dcent. Stay safe out there.
INTEL: Bitget hot wallet potentially hacked.
Onchain data shows ~$19.7M in USDT0 leaving a Bitget wallet on Arbitrum, swapped for ~7,111 ETH in six minutes at up to 5% over spot. Cause unclear. Bitget has not commented. Monitoring.
4
1
17
1,228
D'CENT App Wallet XRP is getting drained (hot wallet).
D'CENT's abnormal App Wallet transfers, read off the ledger:
1,552 wallets. 2,009,321 XRP. Two hours. Two new addresses. One script, one bug, a 33-minute pause, and the 12 richest wallets moved by hand.
xrpl.to/insights/dcent-app-w…
1/2
1
5
523
More info here
Important Update Regarding the DCENT App Wallet
To date, abnormal asset transfer cases have been identified involving the DCENT App Wallet. So far, we have not confirmed any impact originating from DCENT Hardware Wallets themselves.
Please follow the guidance below based on how you use the DCENT app.
If you hold assets in the DCENT App Wallet, or if the same recovery phrase is used for both your DCENT App Wallet and a hardware wallet:
Please update the DCENT app to the latest version before transferring any assets to a secure hardware wallet or another trusted wallet address.
• Update the DCENT app before transferring any assets.
• Do not initiate transactions through the DCENT App Wallet before updating the app.
• If the same recovery phrase is used in the DCENT App Wallet, action is required regardless of where that recovery phrase was originally generated.
If you only use your DCENT Hardware Wallet with the DCENT app:
No additional action is required for your hardware wallet if you have never entered or restored that hardware wallet’s recovery phrase in the DCENT App Wallet.
⚠️ Please remain vigilant against impersonation and phishing attempts.
• DCENT will never ask for your recovery phrase or private key, nor will we ask you to send assets to a separate wallet address for recovery or compensation.
• Do not follow recovery or compensation instructions, wallet addresses, or links sent through DMs, email, social media, or other unofficial channels.
We are prioritizing the investigation into the related cases and will provide further updates through our official channels as soon as the cause, scope of impact, and additional response measures are confirmed.
Official X accounts (We have no support X accounts)
@DCENTWALLETS
@DCENTWALLETS_KR
@DCENTWALLETS_JP
Customer Support
dcentwallet.zendesk.com/hc/e…
2
173
Danny retweeted
⚠️ ALERT: Revolut falls for a FAKE government request, exposing sensitive personal information of customers in a disturbing data breach.
Revolut disclosed that it complied with a fraudulent government request using a spoofed official email and valid credentials, exposing PII belonging to a group of customers.
The leaked data reportedly includes passports/driving licences, verification selfies, names, DOBs, occupations, home addresses, emails, phone numbers, IBANs, account statements and full transaction histories, including Bitcoin activity.
No customer funds were reportedly lost and Revolut says its systems were not hacked.
The company has notified affected users and regulators and blocked the source.
Social-engineering attacks are on the rise, with attackers increasingly exploiting human trust and weak verification processes rather than technical vulnerabilities.
195
386
1,599
655,857
Danny retweeted
Pretty crazy that @Trezor has committed to critical security updates for this little guy until at least 2036.
This says a lot about a company.
8
2
80
4,351
120 accounts breached 🙁
This morning we have closed a security incident that allowed an attacker to access 120 Brevo accounts.
The majority of those have no suspicious activity. The bad actor used the access to send phishing emails to the client's contactbase.
The access has been closed as of 11:30AM CEST today 10.09.2026.
We are contacting every affected customer directly and will publish full post mortem later today at: status.brevo.com
3
2
31
6,490
Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link.
We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.
984
1,376
5,590
3,423,292
Nice 🧡 👇
Native Bitcoin support for Trezor is now live in Cake Wallet! 🔐
With v6.4.4, your @Trezor now works directly with Cake for hardware-backed signing and a smoother way to manage your Bitcoin. 🤝
6
463