Tier List of Hardware Wallets S Tier @Tangem @Trezor A Tier @era_wallet @thisisarculus @ngrave_official @OneKeyHQ B Tier @KeystoneWallet @RyderWallet @Ledger C Tier @BitBoxSwiss @SafePal @Blockstream D Tier @ELLIPAL @DCENTWALLETS @BCVaultOfficial @COLDCARDwallet @Bitkey Do you agree?

Pennsylvania is one of the greatest agricultural states in America—and as one of our original 13 colonies, it deserves to be represented at the Great American State Fair as we celebrate 250 years of American agriculture and our nation's founding. I'm grateful to @SenMcCormickPA and @SenFettermanPA for stepping up to help ensure the Keystone State has a place on the National Mall. From dairy and mushrooms to apples, poultry, and so much more, Pennsylvania's farmers, ranchers, and producers have helped feed America for generations. This celebration is about honoring the people and places that built our country. Pennsylvania belongs at the heart of it, and I look forward to welcoming the Commonwealth to the Great American State Fair. 🇺🇸🌾

The incident affecting Coldcard users this week was extremely unfortunate. Security issues like this affect the entire self-custody ecosystem and can undermine crypto’s promise of being your own bank. To reassure our users: The specific failure behind the Coldcard incident has no equivalent in how Zodl generates recovery phrases. On Android, Zodl relies on the operating system’s cryptographically secure random number generator, which is backed by hardware entropy sources. On iOS, it relies on Apple’s equivalent, seeded from the device’s Secure Enclave. These are the same sources that provide for your device's encryption, the encryption of its connections, and of secure messengers you use. On both platforms, Zodl generates 24-word recovery phrases from 256 bits of entropy, twice the industry-baseline 128 bits as in the Coldcard disclosure. We do not implement the type of software fallback involved in the Coldcard incident. If the required entropy isn’t available, wallet creation fails rather than proceeding with a weaker source. This assurance applies to recovery phrases generated by Zodl. If you imported a recovery phrase created elsewhere, its security depends on how that phrase was originally generated. Keystone (@KeystoneWallet) recovery phrases are generated using entropy from multiple independent hardware sources, rather than relying on a single source of randomness. There is equally no equivalence to the Coldcard failure in how Keystone generates recovery phrases. High-quality entropy is fundamental to wallet security. We take our users’ security and privacy seriously, and we’re grateful for the trust they place in Zodl.

Just some of the more interesting news I came across recently: 1. MS: Revised China humanoid shipments to reach 50,000 in 2026 from 14,000u and 28,000u earlier this year. 2. MS: Probe cards and test sockets likely to be priced hike (precious metal hikes + severe shortage of test pin capacity) 3. Capacitor price hikes: MLCC, aluminum electrolytic, tantalum, polymer aluminum, film, and super capacitors from Yageo. 4. $META Vistara architecture: Older DDR4 Memory with CXL as memory expansion 5. OpenAI achieved inference optimization breakthrough that halves costs and reduces GPU requirements. 6. LTAs are being signed with MLCC after Samsung signed LTA with US big tech customer 7. Grid power bottlenecks triggered 5x increase ($25B) in Brookfield's financing for $BE fuel cells. 8. Taiwan's chip packaging and testing supply chain includes major OSAT providers such as $ASX, Powertech, Winstek Semiconductor, Chipbond, ChipMOS, and ShunSin. Dedicated testing companies include KYEC, Ardentec, and Sigurd Microelectronics, while testing interface suppliers include WinWay, MPI, Keystone Microtech, Chunghwa Precision, and Hermes Testing Solutions. Leadframe makers include Jih Lin Tech, SDI, and CWTC, while major IC substrate suppliers include Unimicron, Kinsus, Nan Ya PCB, and Zhen Ding Tech. (Digitimes) - Taiwan-based OSAT providers are raising prices - Memory and IC packaging and testing capacity have both become bottlenecks in the semiconductor supply chain

🚨 Threat Intelligence | Analysis of a Fake TronLink Chrome Extension Phishing Campaign 🚨 SlowMist’s MistEye threat monitoring system recently detected a high-risk phishing campaign targeting #TRON# wallet users. Attackers created a fake Chrome MV3 extension impersonating @TronLinkWallet, using Unicode bidirectional control characters and Cyrillic homoglyphs to spoof the brand name. Once installed, it loads a full phishing page via remote iframe — forming a “shell-core separation” credential theft chain. 🔍 Key Findings: 🔹 The extension name uses homoglyphs for disguise. Its Chrome Web Store page inherits the real extension’s high user count and positive reviews, significantly lowering review barriers. 🔹 Local code is extremely minimal — it only loads a remote page, making static analysis almost useless for detecting malice. 🔹 The remote phishing page perfectly replicates the official TronLink Web wallet UI, stealing mnemonic phrases, private keys, Keystore files, and passwords, then exfiltrating them in real time via Telegram Bot. 🔹 Built-in anti-analysis features (disables right-click, DevTools, drag-and-drop, printing) and geo/language-based redirection for Russian users to evade detection. ⚠️ This is not a simple fake extension — it employs advanced techniques like remote dynamic loading and anti-forensics, making it extremely difficult for traditional static scanners to catch. 🛡️ Immediate Actions : • Uninstall any suspicious extension (Malicious ID: ekjidonhjmneoompmjbjofpjmhklpjdd) • Official TronLink extension ID: ibnejdfjmmkpcnlpebklmnkoeoihofec • Clear localStorage and check for abnormal traffic • If credentials were entered, create a new wallet immediately and transfer assets 📖 Full technical analysis + IOCs + self-check guide here 👇