Wallet

Stay updated on crypto wallets and self custody solutions including MetaMask, Trust Wallet, Ledger and other emerging wallets with insights on hardware and software options, seed phrase backup, multi chain storage, wallet security, Web3 integrations and the latest trends shaping digital asset management.

Selected only

Steven Walgenbach

Tether Plans Self-Custodial AI Mobile Wallet Focused on BTC, USDT, USAT and XAUT

On December 20, 2025, Tether CEO Paolo Ardoino outlined plans to hire a lead engineer to develop a self-custodial mobile wallet that integrates the firm's on-device AI stack. The product is designed to support only Bitcoin via Lightning, USDT, USAT, and the gold-backed XAUT token, emphasizing payments and value preservation. Built on Tether's WDK and QVAC platforms, the wallet would give users local AI-assisted features without relying on cloud-based data processing.

Cointelegraph by Martin Young

Kaspersky: 'Stealka' game-mod infostealer threatens over 100 browsers, 80 wallets

Kaspersky reported on Thursday that a Windows-targeting infostealer dubbed 'Stealka' is spreading via video game cheats, mods, and pirated software. Distributed through GitHub, SourceForge, and Google Sites, it harvests autofill and extension data from over 100 Chromium- and Gecko-based browsers and threatens 115 extensions and 80 crypto wallets.

Gem Wallet unveils cross-chain USDT support across 10+ networks on December 21, 2025

On December 21, 2025 in San Francisco, Gem Wallet announced a unified USDT infrastructure across 10+ chains, adding integrated swaps, bridges, and anti-scam protections. The self-custody, open-source app supports Tron, Ethereum, Solana, BNB Chain, and TON, with biometric security and address-poisoning alerts. Availability spans iOS, Android, and web, with fiat on/off-ramps via MoonPay, Paybis, and Transak.

SantaStealer pushes wallet-stealing MaaS; $175–$300 plans, December 21, 2025

On December 21, 2025, SantaStealer was detailed as a malware-as-a-service that prioritizes crypto wallets. It is promoted on Telegram and hacker forums with monthly plans at $175 (Basic) and $300 (Premium). Rapid7 links it to BluelineStealer and notes weak evasion, while data is exfiltrated in 10MB chunks over port 6767.

Address poisoning reportedly causes $50M USDT loss; tweet dated December 20, 2025

A crypto trader reportedly lost $50,000,000 in USDT after an address‑poisoning scam led to a mistaken copy‑paste. Stablecoins remained pegged, so broader markets saw little reaction, highlighting the finality risk in self‑custody. The incident shows how spoofed look‑alike addresses can appear in wallet history and mislead hurried senders.

Alexander Zdravkov

Address Poisoning Scam Sends Nearly $50 Million in USDT to Fraudulent Wallet on 20 December 2025

On 20 December 2025, a crypto user mistakenly transferred nearly $50 million in USDT to a scam-controlled wallet by copying a spoofed address from their transaction history. Investigators describe this as an address poisoning attack, where the malicious address closely mimicked a legitimate one, leading the victim to send a successful test payment before moving the full amount. Analysts note that the incident is part of a wider rise in onchain losses and highlights how behavioral exploits can bypass technical safeguards.

Cointelegraph by Vince Quill

AI no-code on blockchains to challenge AWS in 2025, says crypto exec after April and Oct 20 outages

In 2025, Dfinity Foundation vice president Lomesh Dutta told Cointelegraph that AI-powered no-code apps on decentralized blockchains could weaken AWS cloud dominance and cut dependence on centralized servers. AWS outages in April and on Oct. 20 disrupted Binance, KuCoin, MEXC and Coinbase for about 15 hours, highlighting the gap between crypto’s decentralization narrative and its underlying infrastructure.

Collins J. Okoth

Investor loses $50M USDT to poisoned address; 16,680 ETH routed via Tornado Cash

On December 20, 2025, a crypto investor mistakenly sent $50 million in USDT to a poisoned address. Within 30 minutes, the funds were swapped to DAI and then 16,690 ETH, with 16,680 ETH routed through Tornado Cash; on-chain timestamps show a 0.005 USDT test and the large transfer minutes apart.

Owotunse Adebayo

Kaspersky flags Stealka malware in pirated game mods stealing crypto logins

On December 20 2025, cybersecurity firm Kaspersky detailed a new infostealer malware called Stealka that is being distributed through pirated mods and cheats for Roblox and other Windows games. The malware targets browser data, crypto wallet extensions, standalone wallet apps, password managers, 2FA tools, and messaging and VPN clients to capture credentials and digital assets. Kaspersky reported detections mainly in Russia with cases also seen in Türkiye, Brazil, Germany, and India, and urged users to avoid unofficial mods, secure their accounts, and limit sensitive data stored in browsers.

Dormant Ethereum Address Holding 2,000 ETH Reactivates After 10 Years, Now $5.9M

A long-inactive Ethereum pre-mine address holding 2,000 ETH, valued at about $5.9 million, has moved again after more than a decade. The tokens were acquired during the first 14 days of the 2014 sale at a fixed rate of 2,000 ETH per 1 BTC, with the buyer paying exactly 1 Bitcoin (around $600). Other large wallets also reactivated on Dec. 1 and Dec. 10.