- Published on
Hodler’s Digest, Aug. 16
- Authors
- Name
- DeepHorus
Over 54,000 cryptocurrency wallet users are now at heightened risk of phishing attacks following two separate data breaches disclosed this week. Trezor and SafePal reported unauthorized access to customer information, exposing personal details that cybercriminals can exploit. The incidents highlight the persistent cybersecurity threats facing the crypto industry, even for users of hardware wallets.
Trezor's breach affected roughly 14,000 users through its shipping provider, ShipMonk. Customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received products between May 10 and Aug. 8 had their personal data exposed. SafePal's breach compromised order information for nearly 40,000 customers, including names, addresses, and purchasing data. SafePal has already identified and taken down more than 30 fraudulent websites and phishing links tied to the incident.
These leaks matter because cybercriminals can use personal information to craft convincing phishing messages aimed at stealing wallet recovery phrases. While hardware wallets are considered secure, their users become vulnerable when physical addresses and order histories are compromised. The scale of these breaches—combined with a separate $116 million theft from Coldcard wallets earlier this year—shows that digital asset holders face mounting threats.
Meanwhile, Galaxy Digital has dramatically cut its estimate of the CLARITY Act's chances of passing in 2026 from 75% to just 10%. Galaxy's head of research, Alex Thorn, noted that the Senate has only 14 working days after reconvening on Sept. 14, making passage difficult unless the bill dominates the entire session. Unless an initial motion to proceed vote happens immediately upon lawmakers' return, the timeline is extremely tight.
To advance the bill, SEC Chair Paul Atkins, President Donald Trump, and executives from Coinbase, a16z, Ripple, Chainlink, NYSE, and Nasdaq will meet at the White House on Wednesday. The SEC also scheduled but then cancelled an open meeting on crypto rules, reportedly due to concerns that unilateral action could anger Democrats and derail negotiations. The CFTC's new Innovation Advisory Committee will meet the following day to discuss crypto, AI, and prediction markets.
In parallel, the CFTC has ordered prediction market Kalshi to ignore a New York restraining order, citing a market emergency. As regulators scramble, crypto companies like Anchorage Digital, BitGo, and Ledger are urging frontier AI labs to grant Bitcoin developers early access to powerful models. They argue that without such access, defenders may lack the tools to keep pace with evolving threats.
The coming weeks will be critical for both regulatory clarity and user security. If the CLARITY Act fails, the SEC and CFTC may issue their own rules for crypto markets. At the same time, wallet users must remain vigilant against phishing attacks, as data leaks continue to compound the industry's challenges.
