On 9 September, customers of Trezor, BitBox and CoinTracking received emails warning of an STM32 entropy vulnerability and asking them to take action on their hardware wallet.
The emails came from those companies' real domains. SPF passed. DKIM passed. Every check your mail provider runs to prove a message came from where it claims to have come from, passed, because it genuinely had.
Attackers had access to Brevo, the email marketing platform those companies send through, and created API keys inside their accounts.
The weak point was never the wallet maker. It was the vendor they trusted to send their post.
No wallet company will ever email you asking for your seed words, telling you to connect your device urgently, or asking you to verify your wallet. Ever.
https://ungovernable.network/shows/bitcoin-brief/kyc-kill-your-customer/
Ungovernable
npub1jc…n2890
2026-09-16 16:06:00 GMT
Author Public Key
npub1jcympy69pht7ptan39se4nd09e4q66qhey649uu3rczm2zh88c7s0n2890Published at
2026-09-16 16:06:00 GMTEvent JSON
{
"id": "e21c3812258b426679eca7fa24c7534ddf947bdd2605ebe22c2ff86ee2757ce8",
"pubkey": "9609b093450dd7e0afb389619acdaf2e6a0d6817c93552f3911e05b50ae73e3d",
"created_at": 1789574760,
"kind": 1,
"tags": [],
"content": "On 9 September, customers of Trezor, BitBox and CoinTracking received emails warning of an STM32 entropy vulnerability and asking them to take action on their hardware wallet.\n\nThe emails came from those companies' real domains. SPF passed. DKIM passed. Every check your mail provider runs to prove a message came from where it claims to have come from, passed, because it genuinely had.\n\nAttackers had access to Brevo, the email marketing platform those companies send through, and created API keys inside their accounts.\n\nThe weak point was never the wallet maker. It was the vendor they trusted to send their post.\n\nNo wallet company will ever email you asking for your seed words, telling you to connect your device urgently, or asking you to verify your wallet. Ever.\n\nhttps://ungovernable.network/shows/bitcoin-brief/kyc-kill-your-customer/\n\nhttps://video.nostr.build/b5429a74952da1f7e61e2cac77b8b1bebb5eaae2964ce5596f2d627127f6474a.mp4",
"sig": "bd9dfcb909a527b2d235e41bb3cde35ec933c83a13b880f16adbb876489e7424d9de6fd86e5e0ce5d5f504aee42ab45599fc929836ee06f79168c8d32ec0d937"
}