BTC price on August 14, 4PM UTC

Second cold storage breach in weeks deepens self-custody trust crisis

The Trezor ShipMonk breach follows the Coldcard hack that drained an estimated $116M in Bitcoin, marking the second cold-storage security incident in rapid succession. Repeated failures erode confidence in self-custody as a safe Bitcoin storage model, a structural sentiment headwind.

Leaked home addresses put 13,689 users at heightened physical attack risk

CertiK tracked 52 physical attacks on crypto holders in H1 2026, up from 39 in H1 2025, with home invasions now the most common method. Stolen shipping addresses from 11,742 fully-exposed Trezor users are exactly the data enabling such attacks, raising real-world safety risk beyond phishing.

Physical crypto theft exceeded $30M in H1 2026 with home address leaks as a key enabler

Chainalysis put physical crypto theft above $30M in H1 2026. The Ledger 2020 breach precedent showed that leaked addresses fuelled ransom demands and violence. The Trezor leak of home addresses for thousands of known crypto holders repeats that same vulnerability at scale.

13,689 Trezor customers exposed via ShipMonk logistics hack

Trezor confirmed on August 10 that shipping partner ShipMonk suffered unauthorized access via a Metabase SQL injection zero-day, leaking names, emails, phone numbers, and addresses for 11,742 customers in full and 1,947 more partially. The breach spans buyers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal.

Trezor warns exposed users face targeted phishing and social-engineering attacks

Trezor acknowledged that while its own systems remain secure, attackers can use the leaked data to impersonate banks, exchanges, or Trezor itself to extract wallet recovery seeds. Past breaches of this kind — including Trezor's own January 2024 ticketing portal leak — have been followed by active phishing campaigns.

Second third-party breach in eight months erodes trust in Trezor supply chain

A January 2024 breach of Trezor's support portal exposed 66,000 users and led to direct phishing attacks. This second supply-chain incident within eight months deepens reputational risk for hardware wallet adoption, a sentiment headwind for Bitcoin's self-custody narrative.