Keystone, a cold wallet manufacturer, confirmed that customer data was leaked from its Shopify online store, including names, contact information, shipping addresses, and order details. Keystone detected the incident on October 20 and confirmed unauthorized access on October 23. The company has since blocked access, patched the vulnerability, and contacted affected customers, but has not disclosed the number of individuals impacted. Some customers reported that data from orders over 180 days old—even from 2024—was still exposed, despite Keystone’s prior commitment to delete shipping information after a maximum of 180 days. The company has not publicly addressed this issue.

11 mnemonic words, 179 device profiles—DarkSword only requires you to open a webpage to steal your crypto. Network asset mapping company Censys released a report on October 7 confirming that the iOS exploit suite DarkSword is still actively targeting cryptocurrency wallets. Victims don’t need to download anything—simply opening a compromised webpage is enough. The attack chain begins with code execution via WebKit and JavaScriptCore, escapes the browser sandbox, escalates privileges to the kernel, and finally injects into SpringBoard—the system process responsible for managing app launches and the home screen. Once injected, 18 wallet modules take effect—one for each targeted wallet—automatically injecting as soon as the target app launches, including MetaMask, Phantom, Trust Wallet, imToken, and others. This toolset operates like a business. A control panel maintains a roster of 75 accounts, each with assigned commission rates and device quotas; agents have their own distribution channels, and over 60 command whitelists are in place, each requiring secondary confirmation before execution.

A hardware wallet can protect your keys, but not the personal data linked to buying it. Names and addresses can fuel convincing phishing attacks. Data minimization matters too. @Pegasusswap brings that privacy-first mindset to non-custodial crypto swaps without KYC.

SITUATION DETECTED: Following the massive cyberattack on Japan's GMO Internet Group, which led to fraudulent trades across 70+ brokerages and FX platforms, CEO Masatoshi Kumagai warns that the internet itself is on the verge of collapse.

customers of foundation, maker of passport hardware wallets, reported phishing emails on october 26 with their names, addresses and phone numbers. one was a fake urgent recall notice. a support reply that a customer shared blames compromised cloudflare api keys, now revoked. but data that was already copied stays useful to scammers. theft needs a user to reveal seed words or approve a bad transaction. the data source and the number of affected buyers are not confirmed.

Since this @zachxbt post: • Coldcard - a Bitcoin hardware wallet, was hacked for $40 million. • Trezor - one of the largest cold wallets, experienced a major data leak. • SafePal - one of the largest cold wallets, experienced a major data leak. • Ledger - the largest cold wallet, got exploited for $86M through a third-party reseller. • Keystone - one of the largest cold wallets, experienced a major data leak. It's joever.

Passport phishing traced back to compromised Cloudflare API keys. No loss figure attached to it yet, so the market read is thin. What happened: the attack surface on identity and credential layers is still wide open, and Cloudflare sits under a big chunk of crypto's front-end infrastructure. Compromise an API key there and you're not exploiting a contract, you're walking through the door the team left unlocked. For positioning, this barely registers on price. Gitcoin Passport isn't a liquid asset you can express a view on, so there's no trade here. The one thing I'm actually tracking is whether any verified-user data was touched, because that would push the story from infra hygiene into compliance territory for the projects leaning on Passport for sybil resistance. Until a loss number or a protocol-level breach lands, treat it as an ops story. Either it's contained or it's still being counted.