Fireblocks discloses BitForge, a set of zero-day flaws affecting widely-used crypto wallet providers; Coinbase, Binance, and Zengo have patched BitForge flaws
Fireblocks said the vulnerabilities affecting Coinbase, Binance and Zengo have since been fixed and has reached out to more than 12 others still at risk.
Context & Ripple Effects
BitForge extends a recurring wallet-security pattern: researchers previously identified a flaw affecting Ledger Live, Edge and Breadwallet that could enable double spending, underscoring how implementation weaknesses can cut across custody products.
This disclosure matters because Coinbase, Binance and Zengo have already patched, while Fireblocks says it has alerted more than 12 other potentially exposed providers. The immediate issue is therefore both remediation and the uneven security posture among wallet operators.
First-order effects
- Coinbase, Binance and Zengo have closed the disclosed BitForge issues; their users face reduced exposure from these specific flaws after updating or using the patched services.
- More than 12 contacted wallet providers must assess whether they are affected and deploy fixes, making patch speed and disclosure coordination the near-term differentiators.
Second-order effects
- Wallet providers that have not patched may face greater user-trust pressure as the patched platforms can point to completed remediation.
- The episode increases the value of security testing and coordinated vulnerability disclosure for wallet operators, following the earlier wallet flaw affecting several major products.
Third-order effects
- If recurring cross-wallet flaws persist, custody and wallet security will become a more visible basis for platform selection rather than a back-end technical feature.
- The pattern reinforces crypto's broader BitForge disclosure and remediation cycle: trust in consumer-facing wallet services depends on providers' ability to find, communicate and fix vulnerabilities quickly.
The trend: Crypto wallet providers are being pushed to treat security remediation and transparent vulnerability handling as core trust infrastructure.