Blink's post-mortem: a permissions flaw open since October 2023 let the attacker grant themselves admin rights, take over 35 custodial accounts and pull 6.61 BTC from 24 of them.
Nine of the targeted accounts had 2FA turned on. The attacker logged into all nine and every attempt to use them was refused. None of them lost anything.
Yes, it's a pain in the ass. Turn it on anyway, everywhere, without fail.
https://ungovernable.network/shows/bitcoin-brief/the-cop-who-robbed-silk-road/
Ungovernable
npub1jc…n2890
2026-10-08 16:00:00 UTC
Author Public Key
npub1jcympy69pht7ptan39se4nd09e4q66qhey649uu3rczm2zh88c7s0n2890Seen on
wss://nos.lolPublished at
2026-10-08 16:00:00 UTCEvent JSON
{
"id": "2604da9f742ed6506e2b078a10eac5cae413a01db9bd850dd67a9ed10b59b595",
"pubkey": "9609b093450dd7e0afb389619acdaf2e6a0d6817c93552f3911e05b50ae73e3d",
"created_at": 1791475200,
"kind": 1,
"tags": [],
"content": "Blink's post-mortem: a permissions flaw open since October 2023 let the attacker grant themselves admin rights, take over 35 custodial accounts and pull 6.61 BTC from 24 of them.\n\nNine of the targeted accounts had 2FA turned on. The attacker logged into all nine and every attempt to use them was refused. None of them lost anything.\n\nYes, it's a pain in the ass. Turn it on anyway, everywhere, without fail.\n\nhttps://ungovernable.network/shows/bitcoin-brief/the-cop-who-robbed-silk-road/\n\nhttps://video.nostr.build/52064e4c7514fb2d12768fa10cf445784f4fafe267244679a2c59e1463e6720c.mp4",
"sig": "39ef2b678b4fef187591704caee1b50499c9b4517927bcf339660fced061c739c5180ecee5bd5c52706e7244402197041935ce27276772f2095b5e1c2b24464c"
}