Investigación de seguridad
A Withdrawal Is a Request: What We Can Learn From Exchange Incidents
Main Takeaway: A balance on an exchange is a record in the exchange's ledger, and taking coins out is a request the exchange has to approve. From Mt. Gox in 2014 to Binance in October 2026, exchange incidents have followed a few repeating patterns, and in most of them users waited on the platform's decision to get their coins back. Self-custody moves the keys, and the work of protecting them, to you. What does an exchange balance actually represent? When you buy crypto on an exchange, the coins usually sit in wallets the exchange controls, alongside everyone else's. Your account shows your share as an entry in the exchange's own database. Coins only leave when you ask for a withdrawal and the exchange signs a transaction from one of its wallets. That step depends on the exchange's systems, policies and solvency on the day you ask. Our guide on where your crypto is actually stored covers the mechanics in more...
Can Your Phone Replace a Hardware Wallet?
A phone can store keys, but it also runs many apps and stays online. Here is what a hardware wallet separates from the phone, and what it does not cover,...
Crypto Hacks in September 2026: What Happened and What Self-Custody Covers
PeckShield counted $766.49M lost to 55 major hacks in September 2026. Most came from one exchange wallet system and one sidechain peg. What self-custody changes and what it leaves as...
How ELLIPAL Hardware Is Built Against Supply Chain Attacks
A hardware wallet supply chain attack modifies a device before delivery. ELLIPAL answers it in layers, from a case built to resist opening and...
Bitget Hot Wallet Incident: Why Trading Continues While Withdrawals Are Paused
Bitget reported about $351.6 million in unauthorized hot wallet transfers on September 24, 2026. Withdrawals paused while trading continued. Here is why both can...
FomoPeek iOS Attack: What Crypto Wallet Users Should Do
FomoPeek 1.1 and 1.2 carried malicious modules capable of escaping the iOS sandbox. Learn what was exposed, what to do now and where hardware...
Entropía de la semilla: cómo comprobar si tu billetera realmente la tiene
La vulnerabilidad de Coldcard fue un error de compilación silencioso: un generador de números aleatorios de software sustituyó al de hardware durante cinco años....
Seguridad cripto en 2025 y 2026: 5 acontecimientos importantes y lo que significan para la autocustodia
Desde el hackeo de 7 millones de dólares del navegador de Trust Wallet hasta la toma de control de 285 millones de dólares de...
Drift Protocol hackeado por 285 millones de dólares: qué revela sobre el riesgo de los exchanges
El exploit de Drift Protocol demostró que «descentralizado» no significa seguro. Esta es la razón por la que la autocustodia con una billetera de...
Los hackers norcoreanos acaban de envenenar una biblioteca utilizada por 83 millones de aplicaciones: por qué tu billetera aislada de Internet no se inmutó
Hackers norcoreanos comprometieron Axios, una biblioteca de npm descargada 83 millones de veces por semana, e inyectaron malware dirigido a criptoactivos. Mientras tanto, dos...
Hackeo de Trust Wallet por 7 millones de dólares: qué significa para la seguridad de las billeteras en 2026
7 millones de dólares robados. 2.520 billeteras vaciadas. 48 horas. El hackeo navideño de Trust Wallet demostró que las billeteras de navegador son fundamentalmente...
Ataque a la cadena de suministro en NPM: qué significa para los usuarios de criptomonedas
Podrían robarte tus criptomonedas sin que lo supieras. Hay un paquete malicioso de NPM activo. Las billeteras frías con firma transparente de ELLIPAL son...