An FBI agent took $2.47M from wallets in 35 FBI investigations. Including one wallet the FBI created itself.
No hack. Just one person with access and nobody else who had to approve.
Even the FBI had a 1-of-1 problem.
No hack. Just one person with access and nobody else who had to approve.
Even the FBI had a 1-of-1 problem.
JUST IN: 🇺🇸 Former FBI agent pleads guilty to stealing $2.47 million in cryptocurrency using wallet credentials obtained from FBI investigations.
0
0
18
1,358
⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣶⣶⣶⣶⣶⣶⣶⣶⡶⠂
⠀⠀⠀⠀⠀⠀⠀⣠⣿⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀⠀
⠀⠀⠀⠀⠀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⠟⠁⠀⠀⠀
⠀⠀⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠟⠁⠀⠀⠀⠀⠀
⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⡿⠃⠀⠀⠀⠀⠀⠀⠀
⠠⠿⠿⠿⠿⠿⠿⠿⠿⠿⣋⣀⣀⣀⣀⣀⣀⣀⣀⡀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⡿⠋⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⠏⠁⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⠟⠁⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠟⠁⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⣠⣿⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀⠀
⠀⠀⠀⠀⠀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⠟⠁⠀⠀⠀
⠀⠀⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠟⠁⠀⠀⠀⠀⠀
⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⡿⠃⠀⠀⠀⠀⠀⠀⠀
⠠⠿⠿⠿⠿⠿⠿⠿⠿⠿⣋⣀⣀⣀⣀⣀⣀⣀⣀⡀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⡿⠋⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⠏⠁⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⠟⠁⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠟⠁⠀⠀⠀⠀⠀⠀⠀⠀
0
0
19
1,018
Trezu at @EFDevcon in Mumbai 🇮🇳
We met people from across the ecosystem, explored Devcon and even left a little Trezu mark on the wall 👀
We’ll be back tomorrow! If you’re at Devcon, come say hi and let’s talk crypto payments and treasury management.
We met people from across the ecosystem, explored Devcon and even left a little Trezu mark on the wall 👀
We’ll be back tomorrow! If you’re at Devcon, come say hi and let’s talk crypto payments and treasury management.
0
0
22
1,428
Day 1 at India Blockchain Week 2026!
Excited to be in Mumbai, connecting with Web3 builders and exploring what's next for blockchain.
Great to catch @VitalikButerin talks on privacy, quantum-safe cryptography, and account abstraction!
If you're at IBW, let's connect and talk asury management! 🤝
@IBWofficial
Excited to be in Mumbai, connecting with Web3 builders and exploring what's next for blockchain.
Great to catch @VitalikButerin talks on privacy, quantum-safe cryptography, and account abstraction!
If you're at IBW, let's connect and talk asury management! 🤝
@IBWofficial
2
1
33
2,511
Nobody stole Binance’s private keys.
That’s the uncomfortable part of the $6.3B hack.
What’s known so far: it started, Binance says, with one engineer’s laptop. From there the attacker reached a service that submits withdrawals. Wallets on 10 chains, with different key types, produced valid signatures in about 30 minutes.
The keys were safe. The system allowed to use them wasn’t.
About $3B is frozen, almost all of it stablecoins that Tether and Circle could block. The ETH and BTC are still with the attacker.
Same group as Bybit in 2025, according to TRM Labs. Both times the cryptography held. The process around it didn’t.
So here’s the question for any team holding funds: is there anything in your setup that can sign alone? A server, a bot, one person’s laptop.
We ask ourselves the same thing every day. In Trezu, every transfer waits for your team’s own approvals, and no Trezu server can approve one for you.
That’s the uncomfortable part of the $6.3B hack.
What’s known so far: it started, Binance says, with one engineer’s laptop. From there the attacker reached a service that submits withdrawals. Wallets on 10 chains, with different key types, produced valid signatures in about 30 minutes.
The keys were safe. The system allowed to use them wasn’t.
About $3B is frozen, almost all of it stablecoins that Tether and Circle could block. The ETH and BTC are still with the attacker.
Same group as Bybit in 2025, according to TRM Labs. Both times the cryptography held. The process around it didn’t.
So here’s the question for any team holding funds: is there anything in your setup that can sign alone? A server, a bot, one person’s laptop.
We ask ourselves the same thing every day. In Trezu, every transfer waits for your team’s own approvals, and no Trezu server can approve one for you.
1
0
16
1,378
Google is building crypto custody for banks. Split the key, require 2-of-3 or 5-of-7, check every transfer against policy before it’s signed.
Crypto teams don’t need to wait for it. Trezu already gives your treasury multi-approval today, with no custodian in the middle and every art contract.
Crypto teams don’t need to wait for it. Trezu already gives your treasury multi-approval today, with no custodian in the middle and every art contract.
BREAKING: 🇺🇸 Google just unveiled new security system to help banks store and transfer cryptocurrencies.
This is MASSIVE!
0
0
29
1,339
Binance founder says no crypto wallet is 100% safe.
We agree. Including the ones where someone else holds your keys.
We agree. Including the ones where someone else holds your keys.
No crypto wallet is 100% safe.
No software is bug free.
No tech is 100% secure.
There are risks in everything you do.
There are risks if you don't do anything.
There will be issues, setbacks and problems to solve.
Stay up-to-date. Manage risks. Solve problems.
0
1
26
1,285
AI agents have already made 138M crypto payments. Sooner or later your team gives one access to the treasury.
The real question: can it move money without asking?
Don’t hand an agent a private key. Give it a seat in your multisig:
→ It can propose payments
→ It can’t approve till needs your team’s signatures
An agent with a key is a hot wallet with opinions.
An agent with a role is a junior teammate.
Building with agents? DM us and we’ll show you how to set up an agent-safe treasury on Trezu.
The real question: can it move money without asking?
Don’t hand an agent a private key. Give it a seat in your multisig:
→ It can propose payments
→ It can’t approve till needs your team’s signatures
An agent with a key is a hot wallet with opinions.
An agent with a role is a junior teammate.
Building with agents? DM us and we’ll show you how to set up an agent-safe treasury on Trezu.
0
0
21
746
Five hardware wallets can still hide a single point of failure.
Ledger’s account of the recent hardware-implant attack describes genuine devices being modified after they left its control to capture recovery phrases during setup.
For a company treasury, that raises four practical questions:
• Where did each signing device come from, and who handled its setup?
• Were signer keys generated independently, with recovery material stored separately?
• Do different people actually review and approve payments?
• Who can add signers or lower the approval threshold?
That last question deserves more attention.
A 3-of-5 payment policy can be undermined by a single account with permission to rewrite it.
Trezu lets teams separate payment approvals from governance, with configurable thresholds for each. Teams can require multiple approvals both to move funds and to change who controls them.
Those rules work alongside trusted device sourcing, independent keys and careful transaction review.
The goal is to limit what one compromised device, account or person can authorize.
Ledger’s account of the recent hardware-implant attack describes genuine devices being modified after they left its control to capture recovery phrases during setup.
For a company treasury, that raises four practical questions:
• Where did each signing device come from, and who handled its setup?
• Were signer keys generated independently, with recovery material stored separately?
• Do different people actually review and approve payments?
• Who can add signers or lower the approval threshold?
That last question deserves more attention.
A 3-of-5 payment policy can be undermined by a single account with permission to rewrite it.
Trezu lets teams separate payment approvals from governance, with configurable thresholds for each. Teams can require multiple approvals both to move funds and to change who controls them.
Those rules work alongside trusted device sourcing, independent keys and careful transaction review.
The goal is to limit what one compromised device, account or person can authorize.
0
0
27
1,512
A verified human can still paste the wrong address.
This is why the second signer actually has to read the transaction.
This is why the second signer actually has to read the transaction.
LATEST: 🏦 Sam Altman's World rolled out World ID for banking and finance, giving institutions cryptographic proof that a real human is behind each transfer, trade, or customer request.
1
0
16
796
Are hardware wallets cooked?
Trezu co-founder and CTO @Freol is live on Crypto Quorum, discussing hardware wallets and their future.
Tune in and join the conversation.
Trezu co-founder and CTO @Freol is live on Crypto Quorum, discussing hardware wallets and their future.
Tune in and join the conversation.
Are hardware wallets done for after a series of hacks and exploits? Or will they have a second wind?
Join us for the next episode of the Crypto Quorum, co-hosted by @zano_project and @RUNEBondApp and sponsored by @EdgeWallet, live Thursday at 5pm UTC!
x.com/i/spaces/1rGmq…
1
0
30
1,223
How to set up your team’s crypto treasury for $0.
Multisig wallets are safer than most hardware wallets.
→ Prepare your signers
Use independent wallets, separate seeds and offline backups. Share public account IDs only.
→ Create your treasury
Go to Trezu, add your team and ential. Confidential keeps balances and payment details private; members and votes remain public.
→ Assign roles
Requestor proposes payments. Finance approves them. Governance manages members and rules.
→ Set both thresholds
Example: 2-of-3 for Finance and 2-of-3 for Governance. Protect governance wallets with hardware devices.
→ Test first
Make a small deposit and test payment. Check the recipient, asset, network and amount before approving.
→ Know the costs
$0 treasury creation. We cover gas for the first 1,000 actions/month, then standard network fees apply. Swap fee: 0.70%.
We never hold your private keys. Your team stays in control.
Bookmark this before your next payroll.
Multisig wallets are safer than most hardware wallets.
→ Prepare your signers
Use independent wallets, separate seeds and offline backups. Share public account IDs only.
→ Create your treasury
Go to Trezu, add your team and ential. Confidential keeps balances and payment details private; members and votes remain public.
→ Assign roles
Requestor proposes payments. Finance approves them. Governance manages members and rules.
→ Set both thresholds
Example: 2-of-3 for Finance and 2-of-3 for Governance. Protect governance wallets with hardware devices.
→ Test first
Make a small deposit and test payment. Check the recipient, asset, network and amount before approving.
→ Know the costs
$0 treasury creation. We cover gas for the first 1,000 actions/month, then standard network fees apply. Swap fee: 0.70%.
We never hold your private keys. Your team stays in control.
Bookmark this before your next payroll.
0
0
21
1,051
Trezu | Multisig treasury for Web3 teams retweeted
So happy to see @meta_pool getting the NEAR Connector!
Now DAOs can stake their $NEAR through @TrezuApp and receive $stNEAR in return.
Their stake keeps earning rewards while $stNEAR remains liquid: usable across the ecosystem and swappable back to $NEAR at any time!
Now DAOs can stake their $NEAR through @TrezuApp and receive $stNEAR in return.
Their stake keeps earning rewards while $stNEAR remains liquid: usable across the ecosystem and swappable back to $NEAR at any time!
3
3
14
702
us watching a founder keep the entire team’s treasury on a single Ledger instead of setting up a multisig
2
0
17
1,172
A good reminder for anyone managing a treasury: a single key should never be a single point of failure.
Keys get compromised, devices get tampered with, seeds get phished, people make mistakes. With multisig, one compromised key can't move funds on its own. You just rotate that signer out and keep going.
Secure setup + multisig = a treasury that survives a bad day.
Keys get compromised, devices get tampered with, seeds get phished, people make mistakes. With multisig, one compromised key can't move funds on its own. You just rotate that signer out and keep going.
Secure setup + multisig = a treasury that survives a bad day.
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com
0
0
5
367
“Night and day.”
That’s how @rhymetaylor from @dragonisnear described voting with Trezu.
Glad to support a DAO that takes its members’ experience and treasury security seriously.
That’s how @rhymetaylor from @dragonisnear described voting with Trezu.
Glad to support a DAO that takes its members’ experience and treasury security seriously.
1
1
17
1,706
Founders: could you go offline for two days at a conference without your company's finance ops stopping?
If your phone keeps buzzing with payments, approvals and invoices, here's how to let your team handle them safely: x.com/i/article/2107…
If your phone keeps buzzing with payments, approvals and invoices, here's how to let your team handle them safely: x.com/i/article/2107…
0
2
31
840