Now Playing
Three Breaches, One Pattern: Third-Party Risk Dominates Crypto Security
Audio is available on Spreaker — see link below.
Blockstream's Liquid Network ransom standoff, a forged government email exposing Revolut users, and 347,000 Trezor phishing emails via Brevo — all in 24 hours. Today's briefing breaks down why trusted third parties have become crypto's most exploited attack surface.
Audio is available on Spreaker — see link below.
Three separate crypto security incidents hit in the past twenty-four hours, and the pattern is hard to ignore. None of them involved breaking cryptography.
The Revolut disclosure is a different kind of threat, and in some ways a more troubling one. A fraudulent email spoofing a government agency cleared domain authentication.
The third incident shows how attack surface scales when you go through a vendor. Hackers accessed one hundred and thirty-eight accounts on Brevo, an email marketing platform, and used that access to send three hundred and forty-seven thousand phishing emails to Trezor customers.
Singapore's police force issued a warning that connects all three incidents to a broader pattern. Scammers are using credential sets from previous unrelated data breaches to take over email accounts, set inbox rules, and then use that access to compromise linked cryptocurrency accounts.
On markets, Bitcoin has slipped below eighty thousand dollars and is testing support near seventy-eight thousand. Fed rate-hike odds are holding near sixty percent, and that's keeping pressure on risk assets despite strong institutional ETF inflows.
The two things worth watching closely from here: whether Blockstream's law enforcement approach produces any movement on the remaining five hundred and ninety-eight Bitcoin, and whether Trezor reports any confirmed fund losses tied to the Brevo campaign. If that number comes through, it will define how costly this third-party exposure wave actually was.
Chapter summary auto-generated from the verified script. Listen to the full episode for the complete content.