Connect with us
DAPA Banner

Crypto World

Kentucky crypto bill under fire over proposed hardware wallet “backdoor” requirement

Published

on

UK man accuses estranged wife of stealing 2,323 Bitcoin using hidden camera

A state-level crypto regulatory bill introduced in Kentucky includes provisions that would force hardware wallet manufacturers to build a “backdoor” into devices, according to the Bitcoin Policy Institute.

Summary

  • Kentucky House Bill 380 proposes requiring hardware wallet providers to enable recovery of seed phrases, raising concerns over potential backdoor access.
  • Bitcoin Policy Institute says the requirement is technically unworkable for non-custodial wallets and could undermine self custody of private keys.

Kentucky House Bill 380 has been amended at the last minute to require manufacturers to provide recovery options for users’ seed phrases, the BPI said.

The bill was introduced by state Representatives Aaron Thompson and Tom Smith.

Advertisement

According to the bill’s official language, providers “shall provide a mechanism for and assist any person who owns a hardware wallet” in resetting any “password, PIN, seed phrase, or other similar information that is necessary to access the contents of the hardware wallet.”

There are also identity verification requirements for users requesting password, seed phrase, or PIN resets from manufacturers.

The BPI says this is “technologically impossible for non custodial wallets” and adds that no one “can access or recover a user’s seed phrase.”

Advertisement

It is a threat to self-custody, which the group warns could push users toward centralized custody options that do not offer the same level of control.

“Kentucky legislators should be protecting their constituents’ right to secure their own property. We urge the Senate to strip this provision before the bill reaches a vote,” the BPI added.

Self-custody remains a debated topic. Crypto proponents argue that it is a fundamental right.

Some regulators agree. For instance, U.S. SEC Chair Paul Atkins said he is “in favor” of self-custody options in cases where intermediaries impose a financial or operational burden on the user.

Advertisement

Meanwhile, California’s Banking and Finance Committee chair Avelino Valencia amended a bill and added provisions that protect a user’s self-custody rights.

However, last year, the SEC issued a warning to retail investors about crypto custody risks and urged users to carefully weigh the trade-offs between managing their own wallets and relying on third-party custodians.

The agency noted that losing a private key would result in permanent loss of access to crypto assets, while also cautioning that custodial services carry their own risks, including hacks, misuse, or insolvency that could leave users unable to access their funds.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Bitcoin Depot Reports $3.7M Loss after Breach of Corporate Wallets

Published

on

Bitcoin Depot Reports $3.7M Loss after Breach of Corporate Wallets

Crypto ATM operator Bitcoin Depot revealed that it lost about 50.9 Bitcoin, worth roughly $3.7 million, after a hacker gained access to some of its internal systems.

The breach happened on March 23 after the attacker took control of credentials linked to Bitcoin Depot’s corporate Bitcoin (BTC) wallets, according to a Monday filing with the US Securities and Exchange Commission. The company said that customer accounts, platforms and personal data were not affected.

Bitcoin Depot added that the attack has not had a major impact on daily operations, and said it has insurance that may cover some of the losses. “As the investigation of the incident is ongoing, the full scope, nature and impact of the incident are not yet completely known,” the filing states.

Shares of Bitcoin Depot jumped sharply on Wednesday, closing at $2.74, up $0.37 or 15.61% on the day, with additional gains in pre-market trading pushing the price to $2.90, a further 5.84% increase, according to data by Yahoo! Finance.

Advertisement

Related: Bitcoin Depot enters Hong Kong as part of Asia expansion

Bitcoin Depot under pressure

Bitcoin Depot has been facing growing legal and regulatory pressure across several US states. The company recently had its money transmission license suspended in Connecticut, along with a temporary cease-and-desist order, with regulators citing violations such as high fees and failure to fully refund scam victims.

The company has also faced a lawsuit from Massachusetts alleging overcharging and facilitating scams, and paid $1.9 million in Maine to compensate affected users.

The US has more than 30,000 Bitcoin ATMs. Source: CoinATMRadar

In June 2024, Bitcoin Depot also experienced a data breach that exposed the personal information of 26,732 customers. The breach was linked to an external system, and authorities cleared the company to issue notifications only after the probe concluded in June 2025.

Related: Australia’s financial watchdog may gain power to ban crypto ATMs

Advertisement

US cities move to ban crypto ATMs

US cities are increasing pressure on crypto ATMs as concerns over fraud grow. Stillwater, Minnesota, has banned crypto ATMs after residents lost large sums to scams, while Spokane, Washington, introduced a citywide ban in June, calling the kiosks a “preferred tool for scammers” following a spike in fraud cases.

Haverhill, Massachusetts, is also considering banning crypto ATMs, with a proposed ordinance citing fraud and money laundering risks that would require all machines to be removed within 60 days if approved.

Magazine: Bitcoin may take 7 years to upgrade to post-quantum — BIP-360 co-author