Wallet

A proposed class-action lawsuit filed in the U.S. District Court for the Northern District of California accuses JPMorgan Chase of providing the core banking services for an alleged $328 million crypto Ponzi scheme tied to Goliath Ventures. The complaint, brought by investor Robby Alan Steele, claims more than 2,000 investors were affected between 2023 and 2025, with around $253 million routed through one Chase account and $123 million sent on to Coinbase wallets.

On March 11, the official Bonk.fun website for the Solana memecoin launchpad was hijacked, with a wallet drainer embedded into the front-end to steal user funds. Only wallets that signed a fake terms-of-service message during the attack window were affected, and the team says losses are minimal. The BONK token has fallen nearly 1% in the last 24 hours and about 45% over the past year while the broader memecoin market has added around 2.5% and climbed back above a $32Bn capitalization.

Mobile chipmaker MediaTek patched a vulnerability in its chipsets on Jan. 5 that, according to Ledger's Donjon security team, allowed attackers with physical access and a USB connection to extract sensitive data from some Android phones. The flaw in the secure boot chain could be used to recover PINs, decrypt storage and steal seed phrases from major software wallets on devices using MediaTek processors and the Trustonic TEE. Ledger has urged users of affected Android phones to install the latest security updates, even as it does not expect the issue to persist.

On Wednesday, Mastercard launched a global Crypto Partner Program that brings together more than 85 crypto-native companies, payment providers, and financial institutions to collaborate on enterprise-focused digital asset products. The initiative involves firms such as Binance, Circle, Ripple, Gemini, PayPal, and Paxos, and builds on Mastercard's existing blockchain and crypto card infrastructure while expanding work on use cases like cross-border remittances, B2B transfers, payouts, and settlement.

Trust Wallet has deployed automatic address poisoning protection covering 32 EVM-compatible networks, using threat intelligence from HashDit and Binance Security to compare and flag suspect destinations. The feature introduces side-by-side address checks in the send flow to help users avoid copy-paste spoofing, amid data showing hundreds of millions of poisoning attempts and substantial recorded losses. Expert guidance also encourages users to rely less on transaction history and more on curated address books or human-readable naming systems when confirming recipients.

On 10 March 2026, Trust Wallet introduced an AI-powered Security Scanner across its mobile app and browser extension after a December 2025 supply chain breach drained about $8.5 million from more than 2,500 wallets. The tool automatically reviews smart contract activity, labels transactions by risk level, and reportedly blocked over $162 million in suspicious activity in 2025, though experts note AI-driven phishing and the lack of native two-factor authentication still pose security challenges.

Trust Wallet has introduced an automatic Address Poisoning Protection feature on its mobile app, initially covering 32 EVM-compatible networks. The tool scans transactions in real time, compares destination addresses and flags lookalike or known scam addresses before funds are sent, aiming to counter a scheme that Cyvers estimates generates over one million preparations per day on Ethereum.

Google's security teams identified "Coruna", a sophisticated iOS hacking toolkit that compromises iPhones through a zero-click exploit and harvests seed phrases from 18 cryptocurrency apps such as MetaMask, Exodus, Phantom, Trust Wallet and Uniswap. The malware affects devices running iOS 17.2.1 or earlier and abuses previously known espionage exploits, while Apple's iOS 17.3 update released in January 2024 and Lockdown Mode can fully block the attack. Coruna has allegedly been used by both a suspected Russian espionage group and a financially motivated group in China, illustrating a thriving secondary market for high-end cyber tools.

Vitalik Buterin has shared a vision for AI-integrated Web3 wallets in which algorithms can propose transaction plans, while humans still approve high-value transfers. He argues that large sums should not be fully delegated to LLMs and instead suggests using local light clients to simulate transactions before users manually confirm them. Community developers later expanded on his ideas with additional AI-based transaction analysis and reconstruction workflows aimed at reducing phishing and blind-signing risks.

Cardano Foundation CEO Frederik Gregaard has warned that a critical infrastructure gap exists around accountability for autonomous AI agents as they become more widely used. He argues that organizations must be able to clearly identify who authorized an AI action, what constraints were set, and where responsibility lies when serious mistakes occur. At the same time, Cardano's ADA has been integrated into DFX.swiss via the Open Crypto Pay standard, enabling users to pay with ADA in 137 SPAR stores across Switzerland.