The Malware That Hijacked Crypto Payments for 8 Years | CoinDesk Daily
9/3/2026 · 2 min · transcript via mlx
Tags
Key topics
— A botnet called Sality operated for eight years by hijacking clipboard data to swap Bitcoin and Ether addresses, causing victims to send funds to attackers instead of intended recipients.
— The Sality attack resulted in approximately $150,000 stolen, which appreciated to $1.35 million as cryptocurrency prices rose over time.
— The CFTC requested dismissal of CME's lawsuit over perpetual futures approval, arguing CME lacks legal standing because it cannot demonstrate actual financial harm.
— CME filed suit in June after the CFTC approved Kalshi's perpetual Bitcoin contract as a futures product.
— The Justice Department seized over $560,000 in cryptocurrency intended for Hamas, along with the digital infrastructure (domains and servers) used for fundraising and recruitment.
— Investigators traced rotating cryptocurrency addresses promoted through encrypted communications and a fundraising website to identify wallets allegedly controlled for Hamas' military wing.
Market & price signals
— The Sality botnet's stolen $150,000 appreciated to $1.35 million due to cryptocurrency price increases over the eight-year period. No other price discussion or on-chain analysis was provided.
Actionable insights
— Always verify the first and last characters of any wallet address after pasting it, since clipboard hijacking exploits rely on subtle address substitution that can be caught with basic visual inspection.
— Remain aware that regulatory disputes between institutions (such as CME versus CFTC) may take extended time to resolve and do not necessarily represent imminent market impact if dismissed on procedural grounds.
Episode sponsorships
Paid placements mentioned in this episode. BTC Pods is not sponsored by or affiliated with these advertisers. Links are included so you can find offers mentioned on the show.
— Grayscale — The world's largest digital asset-focused investment platform. Check out The Stack, Grayscale's blog, at grayscale.com/the-stack.
— RealFi — A smarter stablecoin backed by real-world assets. Visit realfi.co.