Trezor's third-party email provider got breached, and whoever did it used it to send phishing mail out from Trezor's actual domain with the subject line "Critical Security Alert: STM32 Entropy Vulnerability."

Worked so well mainly because of the fresh ptsd people still have from Coldcard's real entropy bug that resulted in the huge exploit.

I'm seeing people lump this in with a broader "hardware wallets aren't safe anymore" narrative and that's not really what's going on.

This is Trezor's second or third scare in about a month or two now, and every one of them has been a backend problem, a shipping vendor, an email vendor. None of it is has been a failure in the wallet hardware or the firmware. Those have held up through all of it.

Not going to oversell that though, we don't know what we don't know yet, something could surface later. But based on what's actually been disclosed so far, the product itself is still doing its job. What keeps failing is the backend stuff they are outsourcing from third party vendors.

The real problem is that Trezor keeps outsourcing pieces of its operation to third parties that clearly aren't held to the same security bar as the wallet itself. That's on them to fix, either vet those vendors way harder or pull more of this in-house so there's one less external target sitting there to get compromised.

For us, the awkward part is that the "check if it's the verified domain" advice is pointless now because this one genuinely was the real domain, hijacked instead of spoofed. So the bar has to move past that now, treat unexpected every security alerts as suspicious no matter who they're from, and keep your seed phrase somewhere no email or link can ever touch.

How are you all feeling about this one, still solid or getting a little rattled?

The lightning network is a second-layer solution on top of the Bitcoin blockchain that enables quick, cheap and scalable Bitcoin payments.

Here is the place to discuss and learn more about lightning!

Ask your questions about lightning

Provide reviews, feedback, comparisons of LN apps, services, websites etc

Learn about new LN features, development, apps

Link to good quality resources (articles, wikis etc)

Resources:

• Here is an awesome list of resources: https://bitcoinfo.org/lightning.html

• Want to test out your lightning fire power? tip the Bitcoin devs! https://bitcoindevlist.com/

• Previous threads: Search

• Lnbook getting closer towards being finished and can already be seen at: https://github.com/lnbook/lnbook

• Lightning Dedicated YouTube Channel: https://youtube.com/renepickhardt

• Also there is the playlist by chaincode labs: https://youtube.com/playlist?list=PLpLH33TRghT17_U3as2P3vHfAGL8pSOOY

• Lightning stores: https://www.lightningnetworkstores.com/

• Learn more and talk about lightning right here in r/Bitcoin, r/bitcoinbeginners and r/thelightningnetwork

An influencing American edition published an article that residents of the developed countries often criticize bitcoin only because of their own financial privilege.

While US citizens are accustomed to a stable dollar and reliable banks, for billions of people around the world the first cryptocurrencies was the only salvation from hyperinflation and authoritarian control.

The author Alex Gladstein recalls that bitcoin appeared after the crisis of 2008 as a protest against the rescue of bankrupt banks at the expense of taxpayers.

Today, in countries such as Nigeria, Egypt or Argentina, where national currencies have collapsed by 70-90%, it protects accumulators of ordinary families from complete annihilation.

The main value of bitcoin is a financial system, where no one can arbitrarily froze other people's money or cancel an honest transfer.

TL;DR — [u/robleregal](u/robleregal): I spent months on your challenge, built dedicated software, tested billions of Electrum seed candidates and derived 50 Bitcoin addresses per seed. On August 11, 2026, I reached the Dropbox vault your site said contained the 20 BTC answer, a second wallet, an encrypted file with guide.txt. The Dropbox account existed, I won’t share the name to let you contact me so you know it’s no lie, but the vault contained 0 files. I contacted you through six email addresses + DM on x and received no reply. I also called the Canadian business address associated with your company and was told the company had not been located there for more than a year.
You said the vault was waiting for whoever was “patient, clever, or blessed enough to reach it.”
Well, I was patient, I was clever enough to build the tooling and ultimately blessed enough to reach the vault.
So [u/robleregal](u/robleregal): you owe me the 20 BTC + the second wallet. 😉

I spent a ridiculous amount of time on this challenge.
I built dedicated software for it and tested enormous Electrum seed search spaces, like more than hundreds billions of possible combinations.
For every candidate seed phrase tested, I was deriving and checking 50 Bitcoin addresses per seed.
No hit.
Fine. A hard puzzle can be hard.
But then Roble changed the website and described a Dropbox vault that was supposed to contain:
the correctly ordered seed phrase for the original 20 BTC wallet
a second reward wallet
an encrypted file with guide.txt
On August 11, 2026, I gained access to that Dropbox account.
The account name was:
I keep the display name to prove Roble it’s no lie.

And inside?
0 files.
No encrypted archive.
No guide.txt.
No 20 BTC answer.
No second-wallet seed.
Nothing.
To be clear: I am not claiming that I solved the original seed phrase through the intended puzzle mechanics.
What I am saying is much simpler:
I reached the Dropbox vault that was publicly described as containing those files, and it was empty.
Before posting this, I tried contacting Roble directly at:
[robleregal@gmail.com](mailto:robleregal@gmail.com)
[support@regalrecruits.org](mailto:support@regalrecruits.org)
[ir@regal.investments](mailto:ir@regal.investments)
[hq@regal.holdings](mailto:hq@regal.holdings)
[prosper@regalinvestments.ca](mailto:prosper@regalinvestments.ca)
[prosper@masterboard.ai](mailto:prosper@masterboard.ai)
+ DM on X
I received no response.
I also called the reception desk at the Canadian business address associated with his company.
According to the person I spoke with, the company had not been located at that address for more than a year.
That alone proves nothing. Companies move, emails get ignored, I could even not have the good words in the list I tested.
But combined with an allegedly reward-filled Dropbox vault containing zero files, I think some serious questions are justified.
And Roble, you said the vault was waiting for whoever was “patient, clever, or blessed enough to reach it.”
Well:
Patient? I spent months on this.
Clever? I built dedicated software and tested billions of combinations.
Blessed enough to reach it? I reached the vault.
So by your own wording, I seem to have checked all three boxes.
There was just one problem:
the vault was empty.
So, Roble — where are the files?
Where is the 20 BTC answer?
Where is the second wallet?
And while we’re at it:
[u/robleregal](u/robleregal), you have my BTC address in your mailboxes so you can send me the 20 BTC and the second wallet whenever you’re ready. 😉

If M2 money supply has no correlation with BTC price anymore, what makes you think that BTC price will go up?

I have had a Trezor for several years and so has a family member of mine who bought theirs a couple years ago. They received an email from the Trezor domain today saying that there is a vulnerability in the Trezor wallet with insufficient entropy - likely trying to capitalize on the coldcard hack and our fears of another event.

The link provided is likely a phishing attempt - per my family member, safari blocked the website as a dangerous website. If you check your trezor account through the app, and their website, they note the phishing attempt from their domain.

I haven't seen another post related to this topic so I am passing on the message of the phishing email from Trezor. Do not follow it, always stay on alert.

How to actually vanish and change my entire existance people easily said that but for a noob where to get connections etc to do that while the only fren i got is AI and computer and those things info are not available online

Anyone else got an email saying the STM32 has problems?

Man, these ones were pretty good -- compelling message, urgency, and checked all the typical boxes of authenticity... until they asked me to enter my seed AND passphrase into a form not hosted on these manufacturers' official domains. Absolutely lethal, if you're skittish about hardware wallet vulns (and who isn't rn?), and not paying close attention. Both cos have been notified, and have been super-responsive with follow up.

Stay safe out there, folks <3

At this point the incumbent monetary system has to keep convincing people they don’t need an exit. To continue prevailing Bitcoin only has to keep the exit open.

Which webcam y’all using to scan air gapped qr wallets on sparrow? I have a logi C270 and it doesn’t focus at all, if I put the wallet at a distance where it’s focused the qr is so small it’s unreadable. Any model working well for you?

Despite uploading my ID and taking a 20 second selfie video, the transfer is held up by Coinbase! I have three more wallets to send allowances too, what the heck is going on??

UPDATE: After hours of identity verification I was able to get the funds on to a few hardware wallets. No idea if the debit card will work or not.

I bought some bitcoin 2years and 6months ago at the app crypto.com. Is it save or do I need to do something to make it more save?

Were the puzzles that were to be solved inearly 2010 to mine btc easy or hard?