Notes from the watch

When wallets get drained, we write down what actually happened — in plain English — and how to check whether it touches you.

2026-08-30

Scammers built fake wallet checkers. Here's how to check a wallet safely.

Fake AML and wallet-check sites are draining the people careful enough to check. The one rule that separates a real checker from a trap: a public address in, never a connection.

Read the write-up →

2026-08-30

$116M left cold storage without touching a single device

A 2021 Coldcard firmware bug weakened seed randomness, and in four waves attackers drained 1,816 BTC from 5,200+ addresses — no physical access needed. What happened, and how to check if you're exposed.

Read the write-up →