wallet

According to Blockaid monitoring, an attack was discovered on an unidentified user's Safe multi-signature wallet on Ethereum. The attacker introduced a custom Uni V4 LP Safe module into a liquidity pool they created through a public keeper multicall, and then the hook unpacked aEthrsETH into rsETH, completing the extraction of Yoink MEV within the block. Currently, two transactions have been confirmed to cause approximately 7.73 million dollars in rsETH losses.

According to Onchain Lens monitoring, Bitwise's BHYP ETF wallet deposited 84,320 HYPE (approximately 6.71 million USD) to Coinbase 6 hours ago, possibly for sale.

According to Decrypt, MetaMask announced the launch of a new wallet protection feature in its mobile app and browser extension, adding warnings for similar addresses, investment and pig-butchering scams, as well as first-time transfer recipients, and providing a clearer transaction confirmation page on mobile and browser extension.Another feature, Added Protection, will automatically roll back transactions that do not match the preview, first launching in the browser extension, with mobile support to follow.

According to Cointelegraph, the European Union's Cyber Resilience Act (CRA) officially came into effect on September 11, requiring cryptocurrency hardware and software wallet providers to submit early warning reports within 24 hours upon discovering actively exploited vulnerabilities or serious security flaws, and to submit complete notifications within 72 hours. Manufacturers must also submit final reports within 14 days after taking corrective or mitigating measures, while serious incidents must be reported within one month.The European Commission stated that the new reporting requirements aim to better protect consumers and businesses from cyber threats, applicable to all "products with digital elements" sold in the EU market, and are built upon the EU's broader cybersecurity strategy. According to the penalty provisions of the final draft, companies that fail to comply with Articles 13 and 14 may face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing incorrect, incomplete, or misleading information may also incur fines of up to €5 million.Before the implementation of this measure, several hardware wallet manufacturers recently disclosed incidents of user data breaches. On September 4, Trezor revealed that a data breach involving its logistics provider ShipMonk affected approximately 67,000 U.S. customers, exceeding the initial estimate of 14,000; this week, Trezor and BitBox also warned users to be cautious of phishing emails disguised as urgent security notifications. In June, the Layer-1 blockchain network Zilliqa warned of vulnerabilities in its Ledger application, where attackers could exploit publicly available on-chain data to recover user private keys.

According to the data panel on the ChainCatcher official website, regarding BTC wallet balances, in the past 7 days, Bybit had the largest increase among the top 10 exchanges, reaching 1.50%; Bitget had the largest decrease, dropping by 2.98%.In terms of exchange asset transparency proof, in the past 7 days, the top three net outflows were Bybit (-436 million USD), Binance (-156 million USD), and Bitget (-128 million USD); the top three net inflows were Deribit (+241 million USD), Bitfinex (+119 million USD), and MEXC (+102 million USD).

According to Onchain Lens monitoring, in the past week, a certain whale has withdrawn approximately 12,870 ZEC from Binance, OKX, Kraken, and Gate.This whale has now transferred 12,860 ZEC to a new wallet, worth about 13.65 million USD.

According to Bitcoin News, the Chief Technology Officer of BlueWallet stated that they screened 904 iOS applications labeled as non-custodial cryptocurrency wallets in the App Store and analyzed 494 of them, ultimately marking 45 as potentially having serious or high-risk security issues, with 23 being of potential serious risk and 22 being high risk.The issues mainly include suspected uploading of mnemonic phrases or private keys to servers, insufficient randomness in generated wallets, storing keys on the server side, using hard-coded encryption keys, and loading unsigned JavaScript code that can interact with sensitive wallet data. The Chief Technology Officer of BlueWallet cautioned that the analysis results may contain false positives, and applications not appearing on the list are not necessarily safe. When it comes to storing large amounts of Bitcoin, merely passing the App Store review and the application's reputation are not sufficient grounds to trust the software.

Solana social wallet Hey Wallet announced on X that it will shut down its product. This product allows users to send SOL through tweets, tip creators, mint NFTs, and conduct transactions on X, Discord, and Telegram.Hey Wallet thanks users who have used the above features and reminds users to back up their wallets.

Electrum has released version 4.8.2, which includes multiple security fixes and enhances the security of the Bitcoin wallet codebase. The related fixes are based on reports from researchers such as Bitcoin Red Team, Calle, l0rinc, haoxucu, and m0wer.This version addresses a critical backup issue affecting some Lightning wallets that use non-deterministic keys and anchored channels. Previously, the channel backups and full wallet backups of affected wallets may have lacked the keys necessary to transfer funds on-chain after a remote force close request; affected users will receive a warning when starting Electrum and should export a new backup, as the old backup cannot correctly restore funds in this scenario.This version also strengthens Lightning HTLC verification, rejects previously acceptable format errors in xpub/xprv keys, expands the scope of codebase security enhancements, and prevents the Android QR code scanner from reading screenshots. This is the third security-focused version release of Electrum since July, following versions 4.8.0 and 4.8.1.

Brian Armstrong posted on the X platform that Coinbase Wallet has launched Pulse mode, and users can download the app to experience it.

According to Onchain Lens monitoring, the Fireblocks custody wallet (9Ryc...G4xfCxk) deposited 19.4 million USD1 supported by Trump to Binance in the past hour.In the past 13 days, this wallet has transferred approximately 149.8 million USD1 to Binance.

Coinbase announced that it has renamed the Base App to Coinbase Wallet, reversing the renaming decision made a year ago, shifting the focus of the self-custody application towards trading and broader multi-chain access. Ryan Kass, the product lead for Coinbase Wallet, stated that the wallet will serve as a "test kitchen" for products and assets not yet offered by the centralized exchange Coinbase, with the first case being perpetual contracts supported by Hyperliquid. The wallet also supports long-tail assets and plans to gradually integrate as new chains go live.The wallet also supports prediction markets and tokenized stocks. Coinbase stated that the Base App has evolved into a broader multi-chain trading platform, making the restoration of the Coinbase Wallet name a reasonable move. Coinbase promotes the wallet with the selling points of "no KYC, no waiting, borderless," allowing users to start trading within minutes after downloading the app, although some features are still subject to regional restrictions. The wallet will automatically detect and hide scam or malicious tokens, and new markets and asset classes must undergo strict product and compliance reviews before going live.In terms of background, Coinbase renamed Coinbase Wallet to Base App in July 2025, positioning it as a "universal app" that integrates social, mini-apps, messaging, payments, and trading. CEO Brian Armstrong admitted in March this year that the social experiment was "not very successful," after which Base founder Jesse Pollak handed over leadership of the app to Jordan "Cobie" Fish.

According to Lookonchain monitoring, a wallet suspected to be related to Cumberland (0x091D...8336) has purchased PONS daily over the past week, withdrawing a total of 8.5 million PONS from Gate, worth 6.55 million USD.

WalletConnect released a 68-page report titled "Current Status of Policy, Compliance, and Regulation," outlining global regulatory progress in areas such as payments, DeFi, trading, custody, and tokenization. The report indicates that discussions on cryptocurrency regulation in major markets have shifted from "whether to regulate" to "how to implement," with relevant frameworks transitioning from legislation to actual enforcement at different speeds, but cross-border rules remain highly fragmented.The report points out that the European Union's Markets in Crypto-Assets Regulation (MiCA) will be fully applicable from December 2024, with the national transition period ending on July 1, 2026; currently, there are about 330 authorized crypto asset service providers in the ESMA temporary register, and over 1,000 companies that were reported to have failed to obtain authorization before the deadline prior to MiCA's implementation. Hong Kong will issue the first batch of stablecoin issuer licenses in April 2026, and Japan's revised Payment Services Act will take effect in June of the same year. Although the U.S. GENIUS Act has become law, the relevant system will not be fully effective until January 18, 2027, and broader market structure legislation is still pending.WalletConnect states that jurisdictions are increasingly adopting a "regulated touchpoint responsibility" model, meaning that issuers and service providers must still fulfill anti-money laundering, sanctions screening, travel rule, and record-keeping obligations when interacting with self-custody addresses. Tools such as sanctions screening, on-chain analysis, address control verification, and reusable identity credentials have been used in some businesses, demonstrating that compliance and self-custody are not mutually exclusive; however, how to regulate decentralized software and protocols remains unresolved, and DeFi continues to be a major frontier issue for global regulation.

According to GMGN data, the market capitalization of the Meme coin WALLET on the Robinhood Chain briefly surged past 50 million USD, setting a new historical high, with an intraday increase of over 57%, currently reported at 46.88 million USD.In terms of narrative, on-chain researchers in the community have found that wallets related to the deployment of WALLET appear to have financial connections with wallets associated with Robinhood co-founder Vlad Tenev. Additionally, some addresses had on-chain activity weeks before the official announcement of Robinhood Chain, and a cluster of wallets has been pointed out as being related to a product manager at Robinhood. As a result, the community has speculated about it being a potential "team-related secret issuance" narrative, drawing parallels with the early path of TIBBIR on Base. Currently, there has been no confirmation from Robinhood, Vlad Tenev, or related individuals regarding any connection with WALLET, and the aforementioned on-chain relationships remain community speculation.According to market news, the price of the Meme coin is highly volatile, and the current core narrative of WALLET is based on unverified on-chain connections, so please be aware of trading risks.

Decentralized wallet infrastructure service provider Privy has launched a stablecoin card prefab component. The project can be embedded into the cardholder experience within the application after a single integration, and it collaborates with Stripe to issue the stablecoin card. The official statement claims that it currently covers over 25 issuing markets, with plans to expand to over 100 by the end of the year.Users can spend directly from their Privy wallet or DeFi vault balance without needing to pre-fund a separate card account. The issuing bank is Lead Bank, the project manager is Bridge, and Stripe provides the issuance services.

According to Bitcoin News monitoring, DART stated that it, along with independent white hat researchers, has recovered over 50 BTC from wallets affected by the COLDCARD entropy vulnerability, completing the transfer before malicious attackers could steal them. DART is a digital asset recovery organization that collaborates with white hat researchers to protect vulnerable funds and coordinates their legal return to the owners.The white hat researchers did not request a bounty and will return the Bitcoin to the owners. The recovered BTC has been transferred to the Crypto Recovery Trust. This trust is a dedicated statutory trust established under Wyoming state law to hold recovered digital assets and return them after confirming and verifying the legitimate owners.The trust will document the recovery process, separating the BTC from DART and the researchers' funds, conducting blockchain analysis, ownership verification, and sanctions screening, and providing a legal return process for verified owners. If there is a dispute over ownership, or if the related funds are involved in sanctions or criminal proceedings, the BTC will be handled according to applicable legal procedures. DART stated that other vulnerable assets and recovery leads are still under review.

Bubblemaps posted on platform X that the main wallet addresses for LAPTOP are mostly new wallets, with 60% of the addresses having no on-chain activity prior."New wallets" refer to addresses that have received funds only in the past 10 days, and most of the wallets mentioned above received funds today.

According to Fortune magazine, Ethereum software company Consensys announced that it will spin off its flagship wallet MetaMask into an independent entity, with founder Joe Lubin serving as CEO. The original Consensys will be renamed to focus on institutional protocols and Ethereum software, led by longtime executive Mike Kriak. Lubin stated that the spin-off is due to the consumer business value accumulation of MetaMask far exceeding that of other business units.MetaMask has expanded from an Ethereum wallet to a platform similar to a new crypto bank, launching a "main account" feature that supports multiple assets and Mastercard debit card spending, and has diversified revenue sources such as perpetual contracts and prediction markets.Lubin did not disclose an IPO timeline, but analysts believe that MetaMask may seek to go public as early as early 2027, while also noting that the willingness to issue tokens has decreased under the current regulatory environment.