SecurityCustody
15 articles tagged Custody.
Articles
Showing 1–12 of 15
Security
SecurityChainalysis says password hashes and live tokens were exposed. The tracing files were not.
Chainalysis’s 7 November note says Reactor, know-your-transaction, and address screening are back online. Data Solutions is not in that note. Password hashes and live tokens for every user were exposed.EasyCryptoGuides · · 5 min read
SecurityBTCPay says old servers were drained. A self-hosted wallet is still a hot wallet.
BTCPay’s 2 November blog says bitcoin and litecoin were taken from hot wallets on version 2.4.1 and older. That is the flaw fixed in 2.4.2, used another way. An old server needs a fresh machine and a new wallet.EasyCryptoGuides · · 4 min read
SecurityMercado Bitcoin says customers will not lose. The hot wallet did.
Mercado Bitcoin’s site is open for looking. Crypto quantities on screen are the 2 November positions. Withdrawals, deposits, and trading are still off. The FAQ no longer states the dollar total.EasyCryptoGuides · · 7 min read
SecurityPolymarket says it will repay about $3.9 million. A script on the site used open sessions.
Polymarket halted trading on 29 October 2026 after a script on its site used open sessions to sell positions and move funds. Its post-mortem puts the repayment at about $3.9 million.EasyCryptoGuides · · 4 min read
SecurityBinance puts the hot-wallet loss near $6.3 billion. Covering it is a company promise.
Binance reopened HYPE and APT withdrawals on 8 November, and Alpha withdrawals on four networks on 9 November. INJ, PLASMA, NEAR, and LTC were not in that post. The 98% figure did not move.EasyCryptoGuides · · 19 min readSecurityHumanode says 12.8 million eHMND was taken. Native HMND was not.
At 15:00 UTC on 28 October 2026 an attacker took 12,773,243.03 eHMND from 436 accounts on Humanode’s contract environment. The project fixed that path in about 40 minutes and said every owner will be repaid in eHMND.EasyCryptoGuides · · 5 min read
SecurityBloom says a trading bot lost 9,408 SOL. A bot that can send is a hot wallet.
On 26 October 2026 Bloom said a flaw in a third-party module drained about 9,408 SOL from 49 addresses belonging to nine users. It took the bot offline and promised to repay those users in full.EasyCryptoGuides · · 4 min readSecurityCoinDCX says old deposit addresses were still taking money. A retired address is still an exchange.
On 22 October 2026 CoinDCX said a process for sweeping deposits off retired addresses had failed. The exchange says it credited the users and that current wallets were not compromised. It has not confirmed the $16 million figure.EasyCryptoGuides · · 4 min read
RegulationCommunity banks sued the OCC over crypto trust charters. A complaint is not a revocation.
On 2 October 2026 the Independent Community Bankers of America sued the OCC over the March chartering rule and Interpretive Letter 1176. The suit asks the court to vacate Protego’s conditional approval. It has not done that.EasyCryptoGuides · · 4 min readRegulationThe SEC’s crypto custody proposal lets the adviser hold the coins. That is not your keys.
On 1 October 2026 the SEC proposed custody rules for advisers and regulated funds that hold crypto. State-chartered trust companies could qualify. An adviser could self-custody only under conditions. Clients holding their own keys is a different sentence.EasyCryptoGuides · · 3 min readSecurity