Sweepstakes Scam Ring Steals $9 Million from Seniors in Decade-Long Fraud

Galaxy Digital's analysis of the Coldcard hack reveals critical firmware security vulnerabilities in hardware wallets as losses surpass $111 million. This incident represents a serious challenge to trust in self-custody solutions within the crypto ecosystem. The attack on Coldcard, one of the most respected hardware wallets, exposes concerning vulnerabilities in cryptoasset security and private key protection. The blockchain and digital security industry now faces pressure to implement more robust protocols, with potential regulatory and market consequences for the cryptocurrency sector.

July 2026 has emerged as the second-worst month for cryptocurrency thefts, with total losses reaching $247.4 million, primarily driven by the Coldcard exploit that compromised over 7,300 wallets and resulted in at least $100 million in stolen Bitcoin. The Coldcard exploit, which occurred across multiple confirmed attack waves, has significantly elevated crypto security concerns, with July's losses more than tripling the $75 million stolen in June. This incident, combined with other breaches throughout the month, marks a concerning milestone for digital asset security, trailing only April 2026 when $644 million was stolen.

Chainalysis reports criminals have stolen over $30 million from cryptocurrency holders through violent attacks in the first half of 2026, putting the year on track to surpass 2025's record of $58 million. These crimes, categorized as "wrench attacks" by security researchers, represent a disturbing trend in crypto security, highlighting the physical risks faced by digital asset holders in an increasingly violent threat landscape.

The surge in violent attacks targeting crypto investors reflects a dangerous shift in digital security threats, where criminals are increasingly willing to use physical force to access digital assets. Experts warn that the anonymity of cryptocurrencies, combined with the high value that can be physically transported on storage devices, makes holders vulnerable targets. This phenomenon is driving increased demand for physical security solutions and education on secure storage practices within the crypto ecosystem.

The cryptocurrency platform Mixin has issued a stark warning about the dangers of self-custody of digital assets following an incident involving the COLDCARD hardware wallet and entropy issues. The incident highlighted critical vulnerabilities in secure cryptocurrency storage, particularly for users managing their own private keys. Blockchain and cybersecurity experts are analyzing the long-term implications for the sector, while users of hardware wallets like COLDCARD are advised to review their private key storage and backup procedures.

Apple temporarily removed Telegram from the App Store after prohibited content surfaced in a public group. Telegram CEO Pavel Durov revealed that an attacker inserted AI-altered illegal material into an edited message as part of an extortion attempt. The messaging platform is now back on Apple's App Store following the incident that raised concerns about content moderation challenges and digital security.

This incident highlights the growing challenges faced by social media platforms in content moderation, particularly with advancing AI technology. Telegram's temporary removal from Apple's App Store raises questions about the company's criteria for apps and developers' responsibilities for user-generated content. The case also demonstrates how cybercriminals are exploiting new technologies for illicit activities, demanding more robust security and content moderation solutions in the cryptocurrency and tech ecosystems.

A $2 AI audit could have caught the Coldcard vulnerability, according to Dragonfly's Haseeb Qureshi, highlighting how artificial intelligence is revolutionizing cybersecurity economics. As the cost of discovering flaws plummets, crypto companies face increasing pressure to adopt AI-powered security measures across all software releases. The Coldcard security flaw serves as a pivotal case study demonstrating how frontier AI models can identify risks that traditional security audits might miss. This shift toward AI-powered testing could become the new gold standard for security in the crypto ecosystem, potentially preventing millions in losses and protecting user funds from sophisticated threats.