Phantom, Solflare, Backpack or a hardware pairing: pick by what you defend against, checked against solana.com's own wallet directory on 15 October 2026.
Check a Trezor Suite installer with GPG before you run it: the v26.9.2 filenames, the SatoshiLabs key fingerprint, and what a good signature cannot catch.
The STM32 entropy alert is phishing sent through Trezor's breached Brevo account on 9 September. What BitBox and CoinTracking received, and what to do.
Trezor aimed to have its Anonymous Delivery option live in the EU by September 2026. The company's own incident page still lists it as coming soon — and here is the narrow threat it would actually defend against.
Ledger published LSB 023, 024 and 025 on 27 August. The one with the widest reach sits in the Secure SDK rather than in any single app, and none of the three is repaired by updating device firmware.
Thousands of hardware wallet buyers had names, home addresses, phone numbers and emails taken in separate breaches at shipping partners, per TechCrunch. No key was touched, and the threat model changed anyway.
A peer-reviewed USENIX Security '26 paper reports that over 63% of EIP-7702 authorisation transactions are associated with malicious attacks on the accounts that signed them. What a delegation is, and why signing one is not the same as approving a token.
The FCA has confirmed a late-2026 consultation on DeFi, alongside updates to its financial-crime guidance. Interfaces, front-ends, and wallet software should read the calendar.
The FCA's cryptoasset regime brings 'arranging cryptoasset staking' into scope, with guidance framed around the end-to-end staking lifecycle. What that means for the interfaces between you and a validator.