Пост канала CRYPTO ROAST от 7 сент. 2026 г.

🔤 UPD: Trezor Data Leak Is Much Bigger Than We Thought 🟠Remember the ShipMonk breach that exposed the personal information of roughly 14,000 Trezor customers? Turns out that was only part of the story. 🟠Trezor now says data belonging to another 67,000 U.S. customers was also exposed. The leaked records reportedly include names, emails, phone numbers, shipping addresses, and order numbers from purchases made between 2019 and 2021. 🟠The ugly part is that this data apparently shouldn’t have existed anymore. Trezor says logistics partner ShipMonk repeatedly provided written confirmation that the old customer data had been deleted — yet it remained stored in its systems. 🟠No private keys or seed phrases were compromised, so this isn’t a hardware-wallet hack. But combining a person’s name, phone number, home address, and proof that they purchased a hardware wallet creates an extremely valuable targeting database. 🟠Trezor is warning users about increased risks of targeted phishing, scam calls, impersonation attacks, and even physical security threats. A scammer doesn’t have to guess whether you own crypto anymore — the leaked order history already tells them. 🟠This is why privacy matters just as much as wallet security. Your seed can remain perfectly safe while leaked personal data gives attackers everything they need to start working on you instead. 👉 They didn’t steal the keys. They leaked a map of who might be holding them.

Без текста

🔤 UPD: $115M COLDCARD Hacker Starts Moving the Bitcoin 🟠Remember the COLDCARD seed-generation flaw that allowed attackers to reconstruct weak private keys and drain thousands of wallets? The stolen funds are finally starting to move. 🟠According to Galaxy Digital’s Alex Thorn, the third-wave attacker moved stolen $BTC on-chain for the first time, swapping part of it into $ETH through THORChain — likely the beginning of the laundering and cash-out phase. 🟠The scale is now estimated at 1,789.28 BTC worth roughly $114.7M, stolen from 8,865 addresses across the full series of attacks. Until now, funds from all three waves had reportedly remained sitting in the attackers’ original wallets. 🟠The hacker is apparently having some trouble. Several THORChain swaps were reportedly refunded, but attempts to move the Bitcoin continue. Around 90% of the third-wave funds still haven’t moved. 🟠Thorn says the BTC routed through THORChain has already been traced to new Ethereum addresses, with the information shared with authorities and crypto companies. Moving across chains may complicate tracking — but it also creates an entirely new trail for investigators to follow. 🟠The exploit phase is basically over. Now comes the harder part for the attacker: turning $115M of publicly traceable stolen Bitcoin into spendable money without touching infrastructure willing to freeze it. 👉 Stealing crypto is one problem. Laundering nine figures on a public blockchain is another.

Без текста

🔤 UPD: Trezor’s Official Domain Is Now Sending Phishing Emails 🟠Remember the Trezor data leak that exposed personal information belonging to tens of thousands of hardware wallet customers? Now there’s another problem — attackers reportedly compromised Trezor’s official domain and used it to distribute phishing emails. 🟠According to Trezor, the attackers gained access through a third-party email provider and started sending fake warnings about a supposed “critical vulnerability.” 🟠This makes the attack especially dangerous. These aren’t random emails from an obviously fake Trezor address — the messages were reportedly being sent through official Trezor infrastructure, giving victims another reason to trust them. 🟠Combine that with previously leaked customer information — names, emails, phone numbers, shipping addresses and order history — and attackers potentially have everything needed for extremely convincing targeted phishing campaigns. 🟠Trezor says it has disabled the affected domain and is investigating the compromise. Users should avoid clicking links in suspicious Trezor emails and access services directly instead. 🔓 First they got the customer list. Now they got the trusted sender. That’s how phishing becomes dangerously convincing.