Plastron Blog — Page 7
Ledger and Trezor Letters Are Draining Wallets. Here's the Scam.
Scammers are mailing Ledger and Trezor owners fake 'authentication check' letters with a QR code that leads to a seed-phrase-stealing site. Here's how the scam works, and what to do if you already scanned it.
Comparison · 2026-08-18 · 6 min readCustodial vs Non-Custodial Wallets: Who Gets AML Screened?
Custodial exchanges run KYC and monitoring the moment you sign up. Non-custodial wallets get no independent AML check at all, unless you run one yourself.
stolen funds · 2026-08-17 · 4 min readSIM Swap Drained Your Wallet? Here's How to Trace Where It Went
SIM-swap theft moves crypto fast, but the wallet it lands in still carries a traceable pattern. Here's what the Terpin v. AT&T case and a 2026 DOJ forfeiture filing show about tracing it before it's gone.
Wallet Screening · 2026-08-16 · 5 min readThe Coldcard Hack Drained $116M. Here's Where It's Hiding.
A five-year-old firmware bug let attackers brute-force Coldcard seed keys and drain $116 million in bitcoin. Most of it is still sitting untouched, which is exactly the window wallet screening needs.
Circle · 2026-08-15 · 4 min readWhy Didn't Circle Freeze $232M in Stolen USDC After the Drift Hack?
Circle froze 16 innocent wallets in March 2026 but let $232 million in Drift-hack USDC move for six hours in April. Here is why, and what it means if your wallet is downstream.
DeFi · 2026-08-14 · 5 min readHyperliquid and GMX Skip KYC. They Skip Wallet Screening Too.
Hyperliquid, GMX, and similar perpetual exchanges skip KYC entirely, but their compliance model only checks IP address, not wallet history. Here is the real gap between geo-blocking and wallet-level screening, and how to check an address before connecting it.
rug pull · 2026-08-13 · 7 min read8-Point Rug-Pull Wallet Checklist: Liquidity Locks Aren't Enough
An 8-step checklist to screen a new token's deployer wallet before you buy in or add liquidity, because a locked pool alone doesn't rule out a rug pull.
Railgun · 2026-08-12 · 6 min readDoes Railgun Get Your Wallet Flagged Like Tornado Cash?
Railgun's zero-knowledge privacy tool screens funds against a public OFAC list before shielding them. Here is why wallet-screening reports still flag any wallet that used it anyway.
Tornado Cash · 2026-08-11 · 7 min readPrivacy Pools vs Tornado Cash: Which Flags Your Exchange Deposit?
Tornado Cash and Privacy Pools both anonymize Ethereum transactions, but they take opposite approaches to compliance. Here is how their sanctions history, mechanism, and adoption compare - and which one actually keeps a wallet from getting flagged.
wallet-screening · 2026-08-10 · 5 min readThe ERC-4337 Blind Spot Most Screening Tools Miss
ERC-4337 smart accounts route transactions through a bundler and a shared EntryPoint contract, and the real wallet sits inside the calldata - not in the transaction header most screening tools check.