Today’s Field Note

Three threads worth your attention, all converging on key custody and personal exposure. Kraken has flagged a security incident affecting Privy, the embedded-wallet infrastructure behind many app-level signing flows, so anyone relying on Privy-provisioned wallets should treat them as potentially compromised until told otherwise. Separately, Galaxy Research now puts losses from the Coldcard-related thefts at possibly north of $150 million, with the recent lull most likely meaning vulnerable holders already got emptied rather than got safe. And a hacker is selling records tied to 678,000 French taxpayers and businesses, feeding a wrench-attack wave that is on pace to make 2026 France’s worst year for violent crypto crime. None of this is price noise. It is your keys, your device, and your home address.

Today’s Move

  • If you use any app with Privy-backed embedded wallets (including Kraken flows), move funds to a wallet you fully control and rotate any linked keys today.
  • Coldcard holders: verify your firmware is current and that your seed was never entered or restored on a compromised path. If in doubt, generate a fresh seed on known-good hardware and sweep.
  • French residents or anyone in the tax-breach set: assume your name, address, and holdings may be circulating. Tighten OPSEC, scrub public wallet-to-identity links, and treat unsolicited “delivery” or in-person contact as hostile.
  • Revoke stale token approvals across your active chains while you are auditing wallets anyway.
  • Watch Kraken’s and Privy’s official channels for scope confirmation before assuming your specific wallet is clear.

Resources

  • https://www.reddit.com/r/CryptoCurrency/comments/1vododo/kraken_important_notice_security_incident/
  • https://decrypt.co/375656/coldcard-bitcoin-thefts-slow-losses-top-150-million
  • https://www.theblock.co/news/ecosystems/2026-08-14-french-tax-breach-exposes-nearly-678000-people-crypto-wrench-attacks-pile-up-411876
  • Incident trackers (reference standard): Rekt leaderboard · SlowMist Hacked

More: Issues · Field Notes · RTFM

Daily field notes, weekly Issues. Follow @ItsAlreadyPrice or subscribe via RSS.