Trezor Phishing Ad and BTCPay Exploit Hit Bitcoin Users: Are Funds Safe?

Source Beincrypto

A Trezor phishing scam promoted through a Google-sponsored ad has reportedly drained one user’s life savings, the victim says. Elsewhere, BTCPay Server shipped an emergency patch for a critical flaw already under active exploitation.

The two incidents landed within roughly 24 hours of each other. Neither touched the Bitcoin (BTC) protocol itself, yet both put user funds at direct risk.

Google Ad Funnels Victims to Trezor Phishing Site

The victim, posting on X (Twitter) under the name David, blamed a sponsored search ad on Thursday. Based on the report, the ad placed a counterfeit Trezor page, hosted on Google Sites, above the wallet maker’s real website.

Anyone who typed a recovery seed into the page handed attackers full control of their wallet.

On-chain data shows the wallet flagged in the report received 24.04 BTC across 80 transactions. That haul equals roughly $1.6 million at Bitcoin’s current price near $65,172. However, nearly all of it has moved on, leaving about 0.04 BTC behind.

Trezor said it escalated the case internally and reported the page for takedown.

“For everyone reading: always verify that you’re using the official Trezor website and never enter your wallet backup into a website or form,” the team urged.

The hardware itself was never breached. The attack worked because the seed left the device. The playbook echoes a fake Uniswap phishing site that drained $400,000 from wallets in May.

BTCPay Server Rushes Out Patch for Exploited Flaw

Meanwhile, BTCPay Server, open-source software that lets merchants accept bitcoin payments directly, issued its own warning on Friday.

Follow us on X to get the latest news as it happens

The team told operators to update to version 2.4.2 immediately or power servers down until they can.

“This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can,” the project’s release notes state.

The Bitcoin Red Team, a volunteer security research group, reported the flaw to developers.

However, patching alone does not end the cleanup. Operators must also refresh macaroons, the access credentials Lightning nodes rely on, plus auth strings for other backends.

Anyone who generated a hot wallet inside BTCPay should move those funds and recreate it. Integrators should also update NBXplorer, a companion indexing tool, to version 2.6.10.

Why Both Incidents Matter for Bitcoin Self-Custody

One attack exploited trust in search ads. In contrast, the other exploited code running on merchant servers. Both sidestepped Bitcoin’s security model and hit the software and habits around it instead.

Phishing remains the costliest threat in crypto. January’s crypto theft losses reached about $400.3 million, and one phishing attack drove over 70% of that figure.

Google has yet to explain how the fraudulent ad cleared review. How fast the page comes down, and how many BTCPay operators patch in time, will shape the damage.

Disclaimer: For information purposes only. Past performance is not indicative of future results.
placeholder
Gold Price Analysis Today | Forex Gold Analysis | XAU/USD Analysis - November 11, 2026Get the latest gold price analysis, forex gold insights, and XAU/USD analysis for November 11, 2026. Read on for the details.
Author  Mitrade
Nov 11, Wed
Get the latest gold price analysis, forex gold insights, and XAU/USD analysis for November 11, 2026. Read on for the details.
placeholder
Bitcoin lost its 200-day average — but the exit started three sessions before the CPIBitcoin fell 2.5% to about $73,400 on 11 November, an 11-week low, breaking its 200-day moving average near $73,100. The 24-hour liquidation tally reached $632 to $705 million, roughly 82% of it longs. But spot ETF outflows began three sessions earlier and USDT's market cap has shrunk $6.6 billion in 60 days — the leveraged length left before the inflation print did. A double top at 81,890 and 81,080 leaves a measured target of 69,366.
Author  Suzie
Nov 11, Wed
Bitcoin fell 2.5% to about $73,400 on 11 November, an 11-week low, breaking its 200-day moving average near $73,100. The 24-hour liquidation tally reached $632 to $705 million, roughly 82% of it longs. But spot ETF outflows began three sessions earlier and USDT's market cap has shrunk $6.6 billion in 60 days — the leveraged length left before the inflation print did. A double top at 81,890 and 81,080 leaves a measured target of 69,366.
placeholder
Gold Extends Slide Below $4,000 as Rising US Inflation, Fed December Hike Bets Pressure Prices On November 12, gold prices (XAUUSD) extended their recent losses, falling further below $4,000 in early Asian trading to hit an intraday low near $3,968, marking a third consecutive day
Author  TradingKey
Yesterday 02: 00
On November 12, gold prices (XAUUSD) extended their recent losses, falling further below $4,000 in early Asian trading to hit an intraday low near $3,968, marking a third consecutive day
placeholder
Nvidia slid 7.7% after hours while AMD and Broadcom rose — the AI trade changed hands, it didn't breakNvidia closed Wednesday at 173.73, up 2.87%, then fell as much as 8.1% to 159.44 after reports that its board was preparing for a possible leadership change. The same session, the Philadelphia Semiconductor Index rose 5.7% with all 30 components higher, CoreWeave jumped 24.7% on 168% revenue growth, and Micron added 11.9%. If AI demand were being repriced, AMD and Broadcom would not be bid. This is a governance discount on one name, and 204.54 — the 200-day average — is the level that settles it.
Author  Irene Q.
Yesterday 02: 45
Nvidia closed Wednesday at 173.73, up 2.87%, then fell as much as 8.1% to 159.44 after reports that its board was preparing for a possible leadership change. The same session, the Philadelphia Semiconductor Index rose 5.7% with all 30 components higher, CoreWeave jumped 24.7% on 168% revenue growth, and Micron added 11.9%. If AI demand were being repriced, AMD and Broadcom would not be bid. This is a governance discount on one name, and 204.54 — the 200-day average — is the level that settles it.
placeholder
Gold closed below $4,000 again — the ETF crowd and central banks stayed, the momentum money leftSpot gold is trading near $3,999, its third consecutive lower daily low, after a 5.00% 10-year yield and a 102.85 dollar index raised the odds of a December hike to 87%. But the selling is not coming from the strategic holders: managed-money net longs fell to 324 tonnes, a 21-week low, and Goldman Sachs attributes roughly 95% of five weeks of selling to non-reportable positions. ETFs still hold a record 4,256 tonnes and central banks bought 321 tonnes in Q3. The table below sets the triggers, directions and levels.
Author  Irene Q.
Yesterday 03: 20
Spot gold is trading near $3,999, its third consecutive lower daily low, after a 5.00% 10-year yield and a 102.85 dollar index raised the odds of a December hike to 87%. But the selling is not coming from the strategic holders: managed-money net longs fell to 324 tonnes, a 21-week low, and Goldman Sachs attributes roughly 95% of five weeks of selling to non-reportable positions. ETFs still hold a record 4,256 tonnes and central banks bought 321 tonnes in Q3. The table below sets the triggers, directions and levels.
goTop
quote