Ledger confirmed today a drained customer's Nano X had a hardware implant.
A tiny board with its own SIM reads your 24 words off the screen at setup and sends them out. The genuine check still passes.
Bought from a reseller? New device, new seed. 🟧
https://news.bitcoin.com/security/ledger-confirms-hidden-hardware-implant-in-affected-users-wallet/Bitcoiners in France are getting kidnapped and losing fingers.
The finance committee's fix: declare €100k+ in self-custody to the tax office or pay up to €10k.
Same tax agency where a clerk is charged with selling crypto investors' addresses to gangs. 🟧
https://cryptoast.fr/amendement-declaration-obligatoire-wallet-crypto-100000-euros-adopte-commission/Tried to advertise our gift cards tonight.
Google: under review.
Microsoft: disapproved for the word “Bitcoin.”
ChatGPT: Blocked for “Bitcoin”.
Building on Bitcoin means fighting for the right to say its name. 🧡
75% of our orders last year came from people who'd already bought from us before.
Bitcoin isn't some experiment to them.
They just shop with it. 🟧
Holidays are coming and your bank is still pretending bitcoin is a scam.
Cool.
We just added 50+ physical US gift cards anyway. Pay in sats, we mail them to you, they never hear about it. 🟧
https://coincards.com/us/product-category/physical-gift-cards/Coincards is on Tor now. 🧅
Open the onion, pay in sats, and keep your ISP out of it. They don't need a log of what you buy.
https://6v6ffrjiqp7rywcbtgx5mq4hrc3x5ejeoxgnoq5ejrx464cbqdrfkkyd.onion/ 🟧
By the end of next week, Coincards is adding 600+ products across the 23 countries we already serve.
The team has been killing it lately.
Same bitcoin, more places to actually spend it. 🚀
2022: Ottawa froze ~210 bank accounts over a protest. Two courts ruled it unreasonable and a Charter breach.
2026: Bill C-29 builds permanent financial police under the Finance Minister.
Same party. Permanent badge.
Your keys don't take orders from Ottawa. 🟧
2026 FCA 6 - Federal Court of Appeal
The Federal Court of Appeal is a bilingual, bijural court that makes decisions on matters of federal law across Canada.
Robinhood bought its first $25M of bitcoin for its own balance sheet.
It also custodies ~185,000 BTC that belong to its users.
You can probably guess which pile they'd protect first if things go sideways.
Withdraw to your own wallet. Self-custody is key. 🟧
Visa and Mastercard: two companies deciding what you can buy, now clipping a fee on $12.5B in "crypto" card spend.
Bitcoin was supposed to route around them, not pay them rent.
Spend sats directly with the brands you use, not through Visa/MC overlords. Coincards. No account. 🟧
Canada's self-styled “Crypto King” is now on trial in Toronto.
Aiden Pleterski has pleaded not guilty to fraud and money-laundering charges and is representing himself before a jury.
Whatever happens in court, there's an important distinction worth making:
Crypto doesn't make someone trustworthy.
Neither does calling yourself a king.
Verify, don't trust.
Working on adding a Delivery to NOSTR option on Coincards.com
If we offered delivery of gift cards paid for in bitcoin to a Nostr DM, would you use it?
Coincards V3 is live. ⚡
Spend Bitcoin like cash.
🟠 Gift cards for your favourite stores
🟠 Pay with Bitcoin or Lightning
🟠 Delivered in seconds
🟠 No bank required
New look. Same mission since 2014.
coincards.com
It’s been a pretty rough 24 hours behind the scenes, so here’s something a little more fun.
https://Coincards.com just got a fresh new global homepage. 🌎⚡
Cleaner. Darker. More Coincards.
Live on Bitcoin. No Bank Required.
https://coincards.com
Security Incident Notice
On September 21, Coincards identified unauthorized access to our frontend web server through a WordPress-specific vulnerability.
The attacker was able to gain access to the web server and take a copy of the frontend website files.
*These files do not contain user or order information.*
Our production database is hosted separately behind private networking, and we have found no evidence that the attacker directly accessed or downloaded our production database containing user information.
During our investigation, we did confirm that a small number of customers had their data downloaded through an export tool we use. The export contained a handful of customer account records, including email addresses, account usernames/IDs, and password hashes.
Passwords are not stored or exposed in plaintext. The file contained one-way cryptographic password hashes, which cannot be used directly to log into an account. As a precaution, the affected customers will be contacted directly today with additional information and recommended steps.
We have contained the incident and completed several security measures, including removing the vulnerable software and malicious files, invalidating all existing WordPress login sessions, changing administrator passwords, rotating database and application/API credentials, and adding additional server-level protections to prevent the exploit from being run again.
We also conducted an extensive review for signs of continued access or persistence.
At this time, we have found no evidence of unauthorized administrator accounts, new SSH keys, new system users, persistent malicious processes, keyloggers, or other ongoing access to the server.
The handful of affected customers will be contacted directly today.
We will continue monitoring the environment and reviewing the incident, and we will provide additional information if anything materially changes what we currently know.
We believe transparency is important when a security incident occurs, and we wanted to communicate what happened, what information was affected, and the steps we have taken in response.
The Bitcoin space seems to have never-ending headlines lately.
Just remember to look past the headlines and understand what’s actually happening.
Bitcoin is still strong. 🦾
Stay curious, keep your setup sharp, and stay safe out there. ⚡
🎶 Working 9 to 5... mining fiat. ⛏️
We all trade our valuable time in one way or another.
So, when it comes to holding onto the value we've earned, where we choose to keep it matters. ⚡
Stack. Build. Spend. Live. Repeat.😉
We want to clear up a bit of confusion.
@CoinCards and Coldcard/Coinkite are separate companies.
We have used the name Coincards longer than the coldcard has been around.
When coldcard was created, we asked NVK to reconsider the name. He laughed it off "it's not even close".
With all that's going on, the name is often being used interchangeably on social media. We are also getting support requests to our site for Coinkite products.
To everyone affected by the situation, we're genuinely sorry you're having to deal with it. As fellow Bitcoiners, we know how stressful anything involving your savings or self-custody can be, and we hope everyone is able to get everything sorted safely.
Wishing everyone the best. ❤️
⚽ Who are you cheering for this weekend? 🏆👇
Don't forget to visit Coincards for Gift Cards to stock up on🍕 food, 🥤 drinks, and 🍿 snacks for the Big Games.
Have a great championship weekend! ⚽
