Cryptocurrency and Blockchain

A flaw in Coinkite's March 2021 Coldcard firmware build routed seed generation to a predictable software randomizer rather than the hardware chip, exposing a bounded set of private keys that attackers can reconstruct offline without physical device access. The exploit expanded to 4,585 addresses losing 1,367 bitcoin, valued at nearly $89 million, up from initial estimates of 594.48 bitcoin ($38 million). The third wave targeted smaller holdings, averaging roughly 0.11 bitcoin per victim across 1,912 addresses, compared to wave one's average of nearly a full coin per victim across 1,196 addresses. Coinkite released emergency hotfixes advising users to generate entirely new seeds, while Binance founder Changpeng Zhao urged holders to split funds across multiple wallet brands. Analysts at Galaxy Research note that while each wave exhibits internal single-operator transaction patterns, observers disagree on whether all three waves stem from one actor or independent parties exploiting the same disclosed key space. The thesis that the vulnerable key space is exhausted would be falsified if a fourth wave sweeps more than 500 dormant addresses in a single adjustment period.

Coinbase shares fell sharply after weak cryptocurrency trading activity drove the firm into unprofitability for the quarter. The drop reflects declining transaction fee revenue across spot markets as lower volatility reduced retail engagement. Wall Street analysts maintain backing for Coinbase's long-term revenue diversification strategy, which emphasizes subscription services, staking fees, and institutional custody products to reduce reliance on retail trading volumes. However, lower trading volume directly compresses operating margins for peer exchanges and retail brokerages reliant on transaction spread capture. Wall Street continues to monitor whether fee income from secondary product lines can offset core spot venue revenue contraction.

Bitcoin mining difficulty fell to 126.23 trillion, down 0.74% at its latest adjustment and 19.1% below its 155.97 trillion peak in November 2025. Squeezed margins and depressed hashprices—which touched $27.66 per petahash per day in late June before recovering modestly to $31.7—are forcing operators to curtail operations or shift computing infrastructure toward artificial intelligence workloads. Lower difficulty reduces competition among surviving miners, temporarily improving operational margins. However, Luxor's forward market averages a hashprice of $31.85 through December, signaling limited revenue relief for hardware manufacturers like MicroBT and Bitmain as demand for specialized ASIC rigs softens.