Three separate security incidents hit the crypto market in the past 24 hours, and they share a single thread: none required breaking cryptography. All three exploited trusted third parties — an email marketing platform, a payment processor, and a forged government request.

Blockstream is in a standoff over the September 6 Liquid Network breach. Attackers drained 4,000 Bitcoin from the federation's key management system; white-hat negotiations recovered 3,400 BTC, but hackers are now demanding a 10% bounty for the rest. Blockstream has refused, leaving 598 Bitcoin unrecovered and law enforcement on the table.

Revolut's exposure is arguably more troubling. A fraudulent email spoofing a government agency cleared domain authentication, prompting Revolut to hand over identity documents, IBANs, and full Bitcoin transaction histories for high-net-worth users. Combined with physical addresses, that data profile enables fraud, extortion, and targeted physical attacks.

The Brevo incident illustrates how vendor compromise scales risk. Hackers accessed 138 Brevo accounts and sent 347,000 phishing emails impersonating a Trezor security alert — asking users to enter their seed phrases. This is Trezor's second major vendor breach in weeks, following a ShipMonk logistics compromise that exposed 81,000 customers.

Singapore's police force connected all three to a broader credential-reuse pattern: old passwords from unrelated breaches, combined with email inbox access, are enough to reach crypto exchange accounts.

On markets, Bitcoin is testing support near $78K as 60% Fed rate-hike odds weigh on risk assets despite strong ETF inflows. NFT trading volume rose 6.8% to $46.8M.

Watch for updates on Blockstream's law enforcement approach and any confirmed fund losses from the Brevo-Trezor phishing campaign.

This episode includes AI-generated content.