500 cold wallets emptied in 25 minutes! Coldcard vulnerability leads to theft of 594 bitcoins The well-known Bitcoin cold wallet Coldcard recently revealed a major security flaw: Hackers exploited a firmware defect hidden for years and successfully emptied nearly 500 wallets within just 25 minutes, stealing a total of 594 bitcoins. What is truly shocking is that the vulnerability did not stem from private key leakage or phishing attacks on users, but from a problem with the "Random Number" during the cold wallet's private key generation. The biggest enemy of private keys is not hackers, but insufficient randomness The security of cryptocurrencies is based on one premise: "Private keys must be completely unpredictable." Under normal circumstances, Coldcard should use the chip's built-in Hardware Random Number Generator (HRNG) to produce nearly truly random entropy, which is then used to generate the private key. However, this vulnerability caused the system to skip the hardware random source in some cases and instead use: * Chip Serial Number * System Timestamp * Other predictable non-confidential information to generate the private key. Although these pieces of information seem different, they are inherently patterned and can be inferred. — The private key becomes "guessable." For the average person, the possible combinations of a 256-bit private key are: 2²⁵⁶ This number is so large that even if all the supercomputers in the world worked together, brute forcing it would be nearly impossible. But if the randomness source is limited to a finite set of combinations, such as: * Created within a certain time frame * Known hardware model * Known chip serial number format then the search space shrinks from a cosmic scale to a range that hackers can practically enumerate and test. In other words, hackers don’t need to crack the password; they only need to reproduce the private key generation process at that time to potentially calculate the exact same private key. Once successful, they can directly control all bitcoins in the wallet. Why were nearly 500 wallets emptied in 25 minutes? Because the attack target was not a single wallet but all devices affected by the same vulnerability. Once the flaw was discovered, hackers could mass-generate possible private keys and compare them with on-chain addresses. As soon as they found an address with assets, they could immediately sign transactions and transfer all funds away. Therefore, it looks like hundreds of victims were attacked simultaneously, but in reality, it was a large-scale private key reconstruction attack. Cold wallets are not absolutely secure: Many people believe: "Cold wallets will never be hacked." This is not true. The biggest advantage of cold wallets is that private keys never touch the internet. But if the private key was not generated using truly high-quality randomness from the start, even if the device has never been online, the risk may have been planted at the moment of its creation. Therefore, what truly determines security is not just being offline, but: * Whether a trusted hardware random number generator is used. * Whether the firmware has undergone a complete audit. * Whether there are public and verifiable security mechanisms. * Whether any predictable information is avoided in private key generation. Cryptocurrency security is not just about "keeping private keys offline." The real core lies in whether the private key was born from truly unpredictable randomness. Once randomness loses its unpredictability, even the most expensive cold wallet can instantly lose all protective capabilities. In the world of cryptography, true security comes not from hardware, but from "unpredictability."

The cryptocurrency world in recent years can be said to have magnified human nature to the extreme. You think you are trading, but in reality, you are battling your own greed, fear, and luck. During a bull market, everyone feels like a genius, every random purchase goes up, and once leverage is applied, the world is yours. Not long ago, there were countless stories about financial freedom, but now it has turned into a reality show of forced liquidations. Huang Licheng, 335 liquidations. You read that right, it's not 3 times, not 35 times, but 335 times. This is no longer trading; this is being repeatedly educated by the market, and every lesson is very expensive. From once making 1.4 billion to now losing 1 billion, the period in between is not called volatility; it's called a plot twist in life. What's even harsher is that the account is left with only 30,000 dollars. The cruelest part of the market has never been whether you will lose, but rather that it will make you believe you won't lose when you are winning a lot. Then you slowly increase your position, amplify your leverage, boost your confidence, and in the end, take everything back in one last go. Many people laugh at such stories, but if you break down the elements of leverage, frequent trading, and emotional highs, it's really just amplifying the mistakes that most retail investors make by 100 times. The market has never lacked geniuses; what it lacks are those who can survive until the end. Some people lose because they can't understand trends, some lose because they can't control risks, but more people lose because they don't know when to stop, which is very similar to day trading in the stock market, where they always believe they will win. 335 liquidations are not just a record. It's more like a reminder that if you don't have risk control, the market will do it for you. What you earn by luck will ultimately be lost by skill. $ETH

Finally held on and brought it back, only low leverage can survive Otherwise, if it pulls to 80,000, who wouldn't get liquidated with 100x leverage?

Reuters reveals Meta's predicament after AI layoffs: Security incidents increase by 40%, cleanup time rises by 70% In recent months, social media giant Meta has consecutively laid off staff to develop AI. On August 26, Reuters published a follow-up report pointing out that Meta CEO Mark Zuckerberg proposed an AI transformation plan as early as January this year. This plan, codenamed Organization Transformation (OT), aims to shift Meta towards an "AI-native" operational model, where AI takes over many daily tasks previously performed by employees, leaving only smaller but more talent-dense teams responsible for oversight. After news of Meta's layoffs in March, employee morale was impacted, and managers were even asked to downplay the situation, only informing teams that future roles would "evolve" due to AI. According to an internal post by Meta CTO Andrew in June, employee use of AI-generated code changes increased by 220% year-over-year, but the actual new features or upgrades launched to benefit users only grew by 36%. The wave of AI-assisted coding has instead raised reliability concerns, with "large-scale, disruptive AI agent behavior" causing major technical and security incidents to increase by 40% compared to the same period last year, and employees' time spent "cleaning up" these issues surged by 70%.

Inclusion of Cryptocurrency in Retirement Funds Faces Opposition from Over Half of Respondents Would you accept cryptocurrency being included in retirement plans? The National Institute on Retirement Security (NIRS) in the United States released a recent survey showing that 53% of American respondents explicitly oppose employers including cryptocurrency in workplace 401(k) and other retirement savings plans. Additionally, as many as 77% of people classify cryptocurrency as a high-risk asset, with 46% considering it an "extremely high-risk" investment. The survey was completed by 1,203 adults aged 25 and older, conducted from October 24 to November 14, 2025. These data strongly confirm that the general American public remains extremely cautious and highly reserved about including highly volatile crypto assets in retirement savings accounts. NIRS's survey also indicates that up to 80% of Americans believe the country is facing a severe retirement crisis, significantly higher than the 67% reported in the 2020 survey. Among them, 61% of respondents admit to being extremely worried about not having sufficient financial security after retirement. The main causes of concern are persistently high inflation (73%) and severe volatility in financial markets (62%). Additionally, 76% of respondents worry that if Congress does not take timely action, government social security benefits may face the risk of cuts. $BTC #美国核心PCE持平上月，沃什杰克逊霍尔讲话如何定调？

The Future of Blockchain: Balancing Decentralization and Regulation The privacy track represented by ZEC essentially pursues decentralization, financial freedom, and personal privacy; while regulation represents centralized governance, order, and risk control. But the future of blockchain may not be an either-or choice. It is more likely to move towards: decentralized infrastructure with compliant upper layers, privacy realized through zero-knowledge proofs. Governments can set rules, financial institutions can perform KYC and AML, but users do not have to surrender all their private information. Through ZK technology, it is possible to: "prove that I comply with the rules without exposing all my data." Therefore, what truly matters in the future is not "decentralization defeating centralization," but: how to limit centralized power while preserving individual financial freedom and privacy. And the value of ZEC may be more than just "hiding transactions," but represent a bigger issue: In an increasingly transparent digital world, do humans still have the right to retain private space? This may be the real battleground between ZEC and regulation. $ZEC #ZEC现货ETF首日成交额1480万美元

Only assisting Bitcoin? U.S. repurchases long-term bonds, and may even use trillion-dollar TGA funds, yet yields remain high The U.S. Treasury is expanding its repurchase of long-term U.S. bonds (raising the single operation limit from about $2 billion to at least $4 billion, with potential further increases), while reports indicate it may use nearly $950 billion from the TGA (Treasury General Account) to support bond purchases. Once the news broke, it immediately drove a sharp rise in Bitcoin and gold (Bitcoin quickly rebounded from its low point, with a considerable short-term increase accompanied by massive short liquidations). However, U.S. bond yields (especially long-term) strongly rebounded after a brief decline, returning to high levels. Analysts generally believe that repurchase operations at the current scale are insufficient to truly alleviate the pressure of high yields. Structural issues remain, including a large supply of U.S. bonds, fiscal deficits, and insufficient market demand for long-term bonds. In short: The Treasury wants to use repurchases to suppress long-term bond yields, but yields were not suppressed, while Bitcoin surged first. The market still harbors doubts about the sustainability of high yields. $BTC #财政部拟动用TGA，长债回购能否治本？

"Rich Dad" author Kiyosaki urges buying gold and Bitcoin! The U.S. expanding long-term bond repurchases is "a disguised money printing" The U.S. Treasury's expansion of long-term bond repurchase operations has sparked market discussions about liquidity and the purchasing power of the dollar. Robert Kiyosaki, author of the bestselling financial book "Rich Dad, Poor Dad," criticized this move as "a disguised quantitative easing (QE)," harshly condemning the U.S. government for massively printing "fake money (fiat currency)," and called on investors to turn to scarce assets like gold, silver, and Bitcoin to preserve wealth amid the massive U.S. debt crisis. Treasury: This is not quantitative easing Quantitative easing (QE) refers to central banks expanding the money supply by purchasing financial assets, usually aiming to lower long-term interest rates and stimulate the economy. However, U.S. authorities have a completely different interpretation of this operation. Facing soaring long-term Treasury yields, with the 30-year bond hitting nearly a 20-year high, the U.S. Treasury announced that starting September 9, the cap for each repurchase operation of 10- to 30-year U.S. Treasuries will be raised from the original $2 billion to at least $4 billion. Treasury officials emphasized that the expanded repurchases are purely to address liquidity issues in the bond market and are not formal quantitative easing, as only the Federal Reserve (Fed) has the authority to expand the monetary base. What do you all think? Don't put all your eggs in one basket. I want both gold and Bitcoin!! $BTC

Weekly Market Analysis Recently, Bitcoin (BTC) rapidly surged 20–26% from around $62,000–$65,000 (the strongest performance within a week), briefly approaching or breaking through $79,000, and is currently consolidating around $77,000–$78,000. This appears more like a "strong breakout/rebound with potential for a trend reversal" rather than a simple short-term bounce, but the short-term overbought condition is evident and further confirmation is needed to establish a mid-term uptrend. Key Driving Factors 1. Macro and Liquidity Catalysts: U.S. Treasury Secretary Scott Bessent announced an expansion of long-term U.S. Treasury repurchase operations (at least doubling), which lowers long-term yields, improves risk appetite, and liquidity expectations, acting as a direct trigger. The weakening U.S. dollar also simultaneously benefits gold and Bitcoin.  2. Short Squeeze: Billions of dollars in shorts were liquidated within a short period (some reports indicate massive scale within one or two days), accelerating the rally. 3. Spot and Institutional Demand: The U.S. spot Bitcoin ETF saw strong net inflows (about $1.9 billion over a week, a relatively good level recently), indicating that it’s not just leveraged short squeezes but also spot buying following through. Futures open interest declined during the rally, supporting the judgment of "spot-driven" rather than purely leverage-driven momentum. 4. Regulatory and Policy Sentiment: White House crypto-related meetings and expectations for the advancement of the CLARITY Act (with Senate procedural vote timing closely watched) have reduced regulatory uncertainty premiums. $BTC #BTC突破80000美元，能否站稳新关口

BounceBit permanently shuts down its mainnet and migrates tokens to BNB Chain According to reports (August 25, 2026), Bitcoin restaking and crypto yield platform BounceBit announced the permanent shutdown of its independent Layer 1 mainnet after a hack, fully migrating to BNB Chain. The attacker exploited an authorization vulnerability in the Evmos tech stack, transferring approximately 286.5 million $BB (worth about $3 million) from 9 accounts through 14 transactions within about 5 hours. No private keys, signatures, or wallets were leaked; CeDeFi Strategy, Promo Vaults, Prime, and RWA products were unaffected. The network stopped producing blocks about 40 minutes after the last unauthorized transfer. Follow-up actions: BounceBit decided not to repair or upgrade the existing chain (due to Evmos being discontinued and the high cost of rebuilding), opting instead to permanently sunset the mainnet. Based on a pre-attack snapshot (block height around 20,697,260), $BB will be reissued as BEP-20 tokens on BNB Chain. Tokens transferred by the attacker will not be included in the new supply; legitimate holders’ balances (including staked and unlocking positions) will be automatically restored without requiring any application. $BNB #卡什卡利称美债未失灵，长债回购能否治本？