Gm legends 🧘‍♂️

Richard Heart update and now the story just got bigger Turkish authorities reportedly arrested 3 of his bodyguards and searched 15 addresses across Istanbul The reported seizures include $7.15M in cash 160K lira 6 cold wallets weapons and dozens of storage devices But the cash is only part of the story Those 6 cold wallets raise a bigger question Can investigators access the funds without the recovery phrases or private keys? Finding a wallet is one thing Proving what it holds and gaining access to it are two very different things The investigation is getting bigger but what investigators can actually recover remains to be seen 🧘‍♂️

How fast should a wallet company warn users after receiving a report of a possible hardware implant? Joe Grand says he contacted Ledger on March 4 about an implant found in a Nano X he bought through Lazada Thailand According to Grand 👉 Ledger acknowledged his report and said it was investigating 👉 Ledger declined to comment on how it handled the report 👉 Mark Karpelès says at least two people contacted Ledger as early as December 2025 and he has seen no public warning But these claims have not been independently verified And when Cointelegraph checked Grand’s seller was not on Ledger’s Thailand reseller list The public only heard about the issue on October 9 when the CryptoBilis losses surfaced That raises an important question One report from a grey market seller may not be enough to establish a wider problem But what happens when multiple reports start coming in? At what point does a potential security issue become something buyers need to know about? That is the question worth asking Here is what you can do now 👉 Buy directly from the manufacturer where possible 👉 Remember that an authorised reseller listing is not a guarantee of safety and CryptoBilis was reportedly listed among Ledger’s authorised resellers 👉 Inspect the packaging and device before setup 👉 Never trust a recovery phrase supplied on a card inside the box A hardware wallet can protect your keys from online threats But it cannot eliminate every risk in the supply chain Your security depends on more than the device itself 🧘‍♂️

An OpenAI model just spent crypto from a wallet it did not own No hack No exploit It found a recovery phrase that was already public And decided the funds were abandoned Here is what happened and why every crypto holder should care 🧵👇

Gm legends 🧘‍♂️ What happens to MSTR if MSCI actually removes Strategy from its indexes? MSCI’s simulation using May 2026 data flagged Strategy and Metaplanet for potential removal SharpLink landed on the watchlist And this is not just a crypto rule MSCI also identified Yellow Cake a uranium company in its consultation The focus is on companies that mainly hold investments rather than operate a business Here is how the screen works 👉 Operating assets must exceed 50% of total assets 👉 If a company fails that test it must also fail 4 of 5 financial ratios to become ineligible What changes for digital asset treasury companies? MSCI is replacing its temporary restriction on companies holding 50% or more of their assets in digital assets with this new screening approach Why should MSTR holders care? Index funds tracking MSCI indexes may need to sell their shares if Strategy is removed JPMorgan estimated around $2.8B in potential outflows from MSTR That means selling pressure on Strategy shares Not Strategy selling its Bitcoin But being flagged does not mean automatic removal Existing members must fail the screen in both of their two latest annual filings to be removed Fail once and they can be placed on the watchlist That is where SharpLink stands The key dates 👉 November 11 for the final list 👉 After the November 30 close for the changes to take effect The market may react to the headline But the real question is whether Strategy gets removed and how much selling follows Watch November 11 not the noise

Ledger’s latest investigation reveals this was more than random tampering An organized group reportedly bought genuine Ledger devices opened them added hardware designed to steal recovery phrases and resold them through shops in Southeast Asia The Secure Element was not broken The operating system was not broken The weakness was in the supply chain Ledger says it has paused reseller sales across Southeast Asia and Hong Kong and banned the resale of returned devices This is why where you buy your hardware wallet matters If you suspect your device was affected do not keep using it as if nothing happened 👉 Contact Ledger through its official support channel 👉 Get a trusted replacement device directly from the manufacturer 👉 Generate a completely new recovery phrase and move your funds safely A hardware wallet can protect your keys from online attacks But it cannot guarantee the device was never tampered with before it reached you Self custody starts before setup 🧘‍♂️

Gm legends 🧘‍♂️ Over $485M liquidated in just one hour last night About $465M came from long positions as BTC slipped below $81K But one trader’s story makes the lesson even clearer Machi reportedly turned $56K into $12.25M in four months Now his account is down to about $21.8K after getting fully liquidated That is what leverage trading can do You can be right about the market and still lose everything when your position is too large for the move against you The goal is not just to grow your account It is to protect what you have already built If you are in profit take some off the table into spot or stables As your account grows reconsider your position size instead of increasing risk just because you can Know your liquidation price before you enter And never let one position decide the fate of your entire portfolio Making money takes skill Keeping it takes risk management, which is one of the most crucial skill

Did Richard Heart just get arrested? Turkish media report that the HEX PulseChain and PulseX founder was detained in Istanbul alongside his wife Reports say the operation involved Turkish intelligence and Istanbul police following surveillance of an address in Beşiktaş Heart is reportedly wanted under an Interpol red notice issued at Finland’s request over alleged aggravated tax fraud An assault allegation has also been reported Items reportedly seized include phones laptops graphics cards firearms drones jewellery and cash But the reported cash amount varies widely between sources Here is what matters The Interpol red notice is linked to Finland’s case The US SEC case was dismissed in February 2025 because the court lacked jurisdiction over Heart not because the allegations were proven false What remains unclear is whether Turkish or Finnish authorities have issued an official statement whether extradition proceedings will begin or whether Turkish charges have been filed This is a legal development involving the founder not a ruling on HEX PulseChain or PulseX If you hold HEX PLS or PLSX pay attention to the risks Founder news can affect sentiment and liquidity even when the underlying contracts keep running Be careful with recovery links fake announcements and anyone using this news to get access to your wallet The code can keep running while confidence in the people behind a project changes Founder risk is real too 🧘‍♂️

How do you know nobody tampered with your hardware wallet before it reached you? A genuine-device check alone cannot tell you that The recent Ledger implant reports show why where you buy your wallet matters Bookmark this to avoid falling victim 🧵🧵🧵

Gm legends 🧘‍♂️ Last week we looked at the 6.26M BTC sitting behind exposed public keys Now Coinbase is pushing for Bitcoin to start preparing for the quantum computing threat before it becomes urgent Why does this matter? Bitcoin uses digital signatures to prove that you have the right to spend your coins A powerful enough quantum computer could eventually break the cryptography behind those signatures Coinbase wants the network to begin planning a gradual transition to quantum resistant signatures One idea would let the same coins be spent using either the existing key or a new quantum safe key during the transition But some difficult questions remain What happens to old and lost coins that never migrate including wallets from the Satoshi era? Nothing has changed on Bitcoin yet and current quantum computers cannot break Bitcoin keys But waiting until the threat becomes real could leave millions of coins exposed with too little time to migrate Stop reusing addresses and keep your wallet software updated When proper quantum safe options become available make sure you understand how to migrate safely The real challenge is not just building stronger security It is getting millions of holders to adopt it before they need it

Can you trust a hardware wallet just because you bought it from a major retailer? Sit with that for a minute MediaMarktSaturn has reportedly pulled Ledger products from its stores and website A buyer reported finding extra cables and an LTE module inside two wallets bought from different branches Ledger has not confirmed any European fund drains linked to these reports The confirmed losses previously reported were tied to the CryptoBilis reseller in Southeast Asia But this raises a bigger question A device can be genuine and still have been tampered with after leaving the factory Authenticity checks and physical security are not the same thing Your seed phrase can stay offline and your funds can still be at risk if the device itself has been compromised Buy directly from the manufacturer when possible If you bought an affected device and suspect tampering do not enter your seed phrase or transfer funds to it before getting guidance from the manufacturer Self custody means controlling your keys It also means knowing what you are trusting to protect them 🧘‍♂️

How does an attacker mint 19M tokens that should not exist? THEO on Base was exploited for about 700 ETH worth roughly $1.76M PeckShield flagged 19M THEO minted on Base The attacker swapped them for 700.8 ETH and bridged the funds to Ethereum THEO is down about 92% THEO on Base comes through Autheo’s bridge built on Hyperlane Warp Routes How the unauthorized mint happened is still unconfirmed But this is the question every bridged token raises Who has the power to approve what comes across? Before you hold one find out who controls that process and how many approvals it takes Because if one key can authorize the wrong mint your funds carry that risk too