seguridad

🔓 Closing the page doesn’t erase a permission on the blockchain.

Connecting a wallet to an app and authorizing it to spend tokens are two different permissions.

For example, an approval of $USDC on Ethereum allows a specific address to spend up to the authorized amount. It doesn’t automatically authorize all other tokens.

Disconnecting the app doesn’t revoke that approval: it may remain active even if you no longer visit the site.

Before signing, check the authorized address, the token, and the limit. Unlimited approvals increase your exposure if the contract is malicious or compromised.

Have you ever confused disconnecting with revoking?

Source: Binance — Aprobaciones en blockchain
#Seguridad #Web3 #Criptomonedas

The author may receive rewards from Binance.

Artificial intelligence learned to find bugs in Bitcoin’s code.

Bitcoin Core developers have just changed the security rules.

Before, they kept detected bugs secret for months.

Now, that waiting period is being eliminated.

The reason is simple: this summer, AI tools found hundreds of bugs in $BTC before humans did.

If AI detects a vulnerability, there’s no point in hiding it.

It’s better to fix the code quickly before someone else notices the weak point.

What do you think of this change in strategy?

#Bitcoin #Cripto #Security

🔐 Three concepts to understand your wallet at $BTC

1️⃣ Public address: lets you receive funds. You can share it, although its activity can be viewed on the blockchain.

2️⃣ Private key: authorizes transactions. It must remain secret.

3️⃣ Recovery phrase: in wallets that use one, it lets you restore access. It should not be shared either.

There’s another important difference: with custodial wallets, a third party manages the keys; with non-custodial wallets, that responsibility is yours.

Which concept did you have the most questions about?

Source: Binance Academy — Billeteras de criptomonedas

#bitcoin #Criptomonedas #Seguridad

The author may receive rewards from Binance.

34 seconds. That's how long it takes a scammer to send you an edited screenshot of a mobile payment. 🚨

Before releasing $USDT:
✅ Open YOUR banking app, not the image
✅ Check the available balance, not “in transit”
✅ Verify that the account holder’s name matches
✅ If anything doesn’t add up, cancel and open a dispute

There are 256 offers today and a spread of Bs. 37.67. With so many offers, being in a hurry is no excuse.

📊 Live rates and analysis at https://pitbullchain.com

$USDT #P2P #Seguridad #BinanceSquare #Venezuela

Security audits aren’t the shield many people think they are.

A recent report by Hacken paints a stark picture.

In the third quarter, $1.18 billion was lost to hacks.

The surprising finding is that 77% of those losses occurred outside the scope of current reviews.

Often, the problem isn’t in the core code.

The failure stems from compromised vendors or patches that were never installed.

Having a security seal doesn’t guarantee everything is protected.

Blind trust seems to be the biggest risk in the sector.

Are you surprised by this level of negligence in these projects?

$BTC #Cripto #Security

Hacks in the crypto sector remain a serious problem.

During the third quarter, losses reached nearly $1.2 billion.

This was driven mainly by incidents at Bitget and Liquid.

Interestingly, 77% of these losses were not caused by direct flaws in the protocols.

The problem came from compromised providers, development tools, and infrastructure components that were outside the scope of routine security audits.

It seems attackers found a backdoor that nobody was watching.

What do you think of this way of attacking the market?

$BTC #Cripto #Security

🚨 A spy chip was found INSIDE Ledger wallets!!!
When you entered your 24 words, the chip read them and sent them to the attacker over a mobile network. - 300+ wallets drained - Up to USD 93M stolen - MediaMarkt suspended Ledger sales in Europe All confirmed losses came from one reseller (CryptoBilis). Ledger says it has not confirmed any thefts from devices bought on its official website. If you did NOT buy your wallet from ledger.com: create a new seed phrase on another device and move your funds. Where did you buy yours? 👇 🟢 Official website 🟡 Amazon / store 🔴 Reseller #Ledger #Seguridad #ledgertech

Buying hardware from unofficial sources can be very costly.

Ledger detected LTE-connected implants in wallets sold by CryptoBilis. These devices were able to extract users’ recovery phrases.

CryptoBilis has stopped selling them. Meanwhile, brands such as Trezor and OneKey have cut all business ties with this reseller.

It’s an important reminder to be careful where we buy our security devices. It’s always best to go straight to the official source.

What extra security measures do you take when buying hardware?

$BTC #Ledger #Security

⚠️ THE THREAT TO YOUR CRYPTO MAY NOT BE THE PRICE.

An Ethereum researcher warned about future AI risks to the cryptography that protects wallets. Vitalik urged caution: there is no evidence that keys are broken today.

Is crypto security ready for the AI era?

#Ethereum✅ #Seguridad

You legends! Today we're learning how to stay SAFE online 🛡️

At Binance, we learn by playing—and we even get prizes.

Want to play with me?
Join here 👇
https://www.binance.com/activity/word-of-the-day/Proactive-Security-Wins?ref=CPA_00XZ7X05TH

#CriptoParaNinos #Seguridad #XRPLedgerPatchesXRPCreationBug #seguir

🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK

On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.

⚠️ WHAT HAPPENED?

🔸 The message posed as an urgent security warning.

🔸 It directed users to a fake page for a supposed funds migration.

🔸 COLDCARD removed the post and is investigating how it appeared.

🚨 WERE THE WALLETS HACKED?

There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.

🛡️ HOW TO PROTECT YOUR FUNDS

1️⃣ Don’t click migration links shared in suspicious posts.

2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.

3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.

4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.

📌 OUR TAKE

Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.

A legitimate account doesn’t guarantee that every link it posts is safe.

🔎 WHAT WE’RE WATCHING

🔴 Risk: confirmed victims or new fraudulent posts.

🟡 Monitoring: investigation ongoing.

🟢 Improvement: source clarified and security measures strengthened.

⚠️ Don’t confuse a fraudulent link with a confirmed device hack.

📌 ALERT / SECURITY

#bitcoin #BTC #Coldcard #Security

🚨 LEDGER ALERT: UNAUTHORIZED HARDWARE DETECTED

Our October 9 alert has an important update.

Ledger confirmed that a device linked to affected users contained an unauthorized electronic component.

⚠️ WHAT DID THEY DISCOVER?

🔸 A physical modification was identified in a Ledger wallet.

🔸 Researchers detected circuits that could intercept information during setup.

🔸 The mechanism could capture the recovery phrase (the words that allow a wallet to be controlled) and transmit it to the attacker.

🚨 IS THE CAUSE OF THE THEFTS CONFIRMED?

Still NO.

The finding in one device does not prove it explains all the losses under investigation.

The estimated more than US$86 million is also not a definitive official figure.

📊 WHAT SHOULD USERS DO?

Those who bought devices from CryptoBilis in the last 90 days should follow Ledger's warnings:

1️⃣ Do not set up unused devices.

2️⃣ If they have already been set up, consider moving the funds to a trusted device with a new recovery phrase.

3️⃣ Contact official support only.

⚠️ Never share recovery words or enter them on websites.

📌 OUR TAKE

The investigation has moved from a suspicion to identifying an unauthorized component.

This reinforces the hypothesis of a supply chain attack (tampering before reaching the buyer).

It does NOT mean that all Ledger devices are compromised.

🔎 WHAT ARE WE WATCHING?

🔴 Risk: more tampered devices appear or the theft mechanism is confirmed.

🟡 Watch: the investigation continues without conclusions.

🟢 Improvement: the scope is identified and a broader impact is ruled out.

We will remain attentive to official results.

📌 ALERT / SECURITY / FOLLOW-UP

#Ledger #bitcoin #Crypto #Security

🚨 LEDGER ALERT: POSSIBLE THEFTS OF MORE THAN US$86 MILLION IN CRYPTOCURRENCY UNDER INVESTIGATION

Ledger is investigating losses of funds among users who bought hardware wallets from the CryptoBilis retailer in Southeast Asia.

⚠️ WHAT DO WE KNOW?

🔸 Ledger requested that the retailer suspend sales and shipments while it investigates.

🔸 Investigators estimate cryptocurrency losses of more than US$86 million.

🔸 Suspicious transactions have been identified on networks such as Bitcoin, Ethereum, and Tron.

🔸 Ledger has NOT yet confirmed the total amount or the cause.

🚨 WARNING FOR BUYERS

Ledger recommends that anyone who bought devices from CryptoBilis within the past 90 days:

1️⃣ Not set them up if they have not used them yet.

2️⃣ If they have already set them up, consider transferring their funds to a trusted device using a completely new recovery phrase.

3️⃣ Contact only Ledger’s official support team.

⚠️ Never share your recovery words or enter them on websites.

🔎 WHAT MAY HAVE HAPPENED?

One possibility is a supply chain attack (products being tampered with before they reach the buyer).

CZ, co-founder of Binance, also mentioned this possibility.

However, it has NOT yet been confirmed.

There is also no evidence that all Ledger devices are compromised.

📊 SCENARIOS WE ARE MONITORING

🔴 Risk: tampering is confirmed or new victims emerge.

🟡 Monitoring: the investigation continues without identifying the cause.

🟢 Improvement: the problem is identified and contained, ruling out a broader impact.

📌 OUR TAKE

Crypto security doesn’t depend solely on keeping keys offline. The device’s provenance matters too.

A hardware wallet can protect your funds, but its origin and setup are essential.

We’ll keep an eye on the official findings.

📌 ALERT / SECURITY / NEWS

#Ledger #bitcoin #crypto #Security

Vitalik Buterin is suggesting a major change to the security of our wallets.

The idea is to proactively move funds to new addresses.

The reason is the rapid advancement of artificial intelligence.

It could pose a security risk to private keys even before quantum computing becomes a real threat.

It’s an interesting move to protect ourselves against the math of the future.

What do you think of this recommendation?

#Ethereum $ETH #Security

🔒 Are you being asked for photos of your ID or your account number in a Binance P2P chat? WARNING!
Lately, I’ve seen many new users worried because some merchants are asking them for additional banking details or photos of their identity documents to “verify account ownership.”
Remember: Binance has already verified your identity through KYC. If a third party asks you for photos of your national ID, passport, or driver’s license in a private chat, that violates the rules and puts you at serious risk of identity theft.
If you come across someone like this:
• Don’t give in to the pressure.
• Don’t send any personal information.
• Report the user immediately.
Keeping our community safe is everyone’s responsibility! 🛡️
#P2P #Seguridad #BinanceSquare #CryptoSeguridad

More than a billion dollars moved in the shadows.

ZachXBT exposed a Chinese criminal network that laundered money for the Lazarus Group.

They managed to trace the flow of funds after the $1.5 billion Bybit hack.

They obtained the information by infiltrating the network directly as customers.

It’s incredible how much money these groups handle.

What do you think of this level of tracking?

$BTC #Cripto #Security

Bitcoin’s structural security advances with a new fix in the development of Bitcoin Core that closes a technical gap in Partially Signed Bitcoin Transactions (PSBT). 🛠️

The issue centered around a missing SIGHASH_SINGLE request, which could leave certain transaction destinations without securely linking, potentially allowing funds to be redirected without needing to compromise users’ private keys. While there is still no finalized release version confirmed for this patch, its integration into the repository marks a key step toward strengthening the protocol infrastructure against complex attack vectors.

For the market, this reinforces the network’s technical resilience in the face of institutional adoption of advanced signing standards. What to watch? The next client update notes for node operators and the correction’s adoption by wallets and institutional custody platforms. 📈

Follow us for technical and macroeconomic analysis without the noise. 👇

#Bitcoin #Criptomonedas #Seguridad #Desarrollo $BTC

The crypto security numbers got ugly this quarter.

Bitget’s hack for $388 million pushed total third-quarter losses above $1 billion.

In total, $1.260 billion was lost across 247 different incidents.

September was the heaviest month, with $769 million in thefts.

Hard to believe that a single month could rack up that much activity.

What caught your attention most about these figures?

$BTC #Cripto #Seguridad

The NEAR Intents protocol has suffered an exploit valued at approximately $3.8 million due to a flaw in deposits and withdrawals, forcing the freezing of cross-chain swaps. The team has confirmed that it will compensate affected users for this security incident. 🔒 This type of event highlights the importance of continuously auditing the liquidity infrastructure between networks. It’s worth monitoring the addresses associated with the attacker and the response of decentralized protocols to similar vulnerabilities. 📊 Do you think cross-chain solutions need better automated pause mechanisms? Comment below and follow us for more updates in the crypto sector. 👇 #Near #DeFi #Criptomonedas #Seguridad $NEAR

The recent security incident involving MetaMask has generated an immediate reaction across the network, driving Ethereum validator exits to nine-month highs. 🛡️ According to ecosystem estimates, the exit, withdrawal, and re-entry processes via platforms such as Lido could take up to 45 days. What does this mean? A temporary adjustment in the network’s staking and liquidity dynamics while users reinforce their custody protocols. It is essential to closely monitor the behavior of the staking participation rate and processing times in the coming days to assess operational stability. 📉🔍 #Ethereum #Criptomonedas #Seguridad #DeFi $ETH