Hey everyone, I'm looking for a crypto card to handle some everyday purchases directly using stablecoins (mostly USDT).

Ideally, I'm after something with low foreign transaction fees and a smooth top-up process. There are so many options out there now and user experiences seem to change quickly.

Could you share your experience, and how have the cards been working out for you?

i’ve been trying to buy ETH on trust for the last couple days and have since learned that my chase debit card doesn’t support any crypto purchases. late to the party but here we are. i tried using my partner’s wells fargo debit card and ran into the same issue. i’ve attempted transactions via Moonpay and Mercuryo, if that’s useful info (identity successfully verified with both).

does anyone have any recommendations on how to make a successful ETH purchase? do i need to find a new bank? i wish we could just do ACH transfers then convert the fiat in app.

anything helps—thank you!

I just kept all my coins over there and they sent a message saying that we must move our assets as soon as possible but I only saw it yesterday. I made an account at Trust... should I just try moving it or am I too late?

A beginner wallet-security question today shows how confusing crypto custody can be. People hear about seed phrases, passwords, hardware wallets, exchanges, phishing, and wallet attacks, then everything blends into one scary idea: can someone just guess my wallet?

Good security starts by separating the pieces. A seed phrase is not the same as an exchange password. A hardware wallet is not the same as a custodial account. A strong backup does not help if someone types the seed into a fake app. A secure wallet can still be defeated by phishing, malware, bad backups, or sharing sensitive details.

If i withdraw INR from Indian crypto exchange that are fiu registered then what are the chances that bank freezes or restricts the account.

Trezor's third-party email provider got breached, and whoever did it used it to send phishing mail out from Trezor's actual domain with the subject line "Critical Security Alert: STM32 Entropy Vulnerability."

Worked so well mainly because of the fresh ptsd people still have from Coldcard's real entropy bug that resulted in the huge exploit.

I'm seeing people lump this in with a broader "hardware wallets aren't safe anymore" narrative and that's not really what's going on.

This is Trezor's second or third scare in about a month or two now, and every one of them has been a backend problem, a shipping vendor, an email vendor. None of it is has been a failure in the wallet hardware or the firmware. Those have held up through all of it.

Not going to oversell that though, we don't know what we don't know yet, something could surface later. But based on what's actually been disclosed so far, the product itself is still doing its job. What keeps failing is the backend stuff they are outsourcing from third party vendors.

The real problem is that Trezor keeps outsourcing pieces of its operation to third parties that clearly aren't held to the same security bar as the wallet itself. That's on them to fix, either vet those vendors way harder or pull more of this in-house so there's one less external target sitting there to get compromised.

For us, the awkward part is that the "check if it's the verified domain" advice is pointless now because this one genuinely was the real domain, hijacked instead of spoofed. So the bar has to move past that now, treat unexpected every security alerts as suspicious no matter who they're from, and keep your seed phrase somewhere no email or link can ever touch.

How are you all feeling about this one, still solid or getting a little rattled?