Bitcoin and Ethereum News: Crypto Security

Cryptocurrency News

6 min read time

|Updated: 2026-09-07

Bitcoin and Ethereum News: Crypto Security

As of September 7, the crypto market is starting the week with relatively limited price movements. Bitcoin is trading at around $79,600, Ethereum near $2,500 and XRP around $1.40, while the movement of 600 BTC mined in 2010 after more than 16 years of dormancy has brought on-chain activity back into focus. On Ethereum, EIP-8141 is introducing discussions around significant changes to transaction architecture, while the publication of data stolen by the Rhysida group after Berlin rejected a 30 BTC ransom demand has put cybersecurity in focus.

Market Perspective: Distinguishing On-Chain Movements From Technical Development Matters

Although today’s three developments are not linked to the same direct price catalyst, they highlight a common point about how information in the crypto market needs to be interpreted. Transfers from old Bitcoin addresses, technical changes being considered for the Ethereum protocol and a ransom demanded by Bitcoin can all create strong headlines. However, the market implications of each development differ once the underlying details are considered.

The transfer of 600 BTC that had remained dormant for more than 16 years does not by itself mean that the assets have been sold into the market. Similarly, the publication of EIP-8141 does not mean the proposal is already active on Ethereum mainnet. In the Berlin incident, Bitcoin was not the infrastructure that was compromised but the payment method requested by the attackers for ransom.

These distinctions show why crypto news need to be assessed beyond headline-level activity. For on-chain transfers, the destination of assets matters; For protocol proposals, the current development status is critical; and for cybersecurity incidents, identifying which technical layer was actually compromised is essential.

600 BTC Moves to New Addresses After 16 Years

A total of 600 Bitcoin mined in March 2010 was transferred to new addresses on September 5 after remaining dormant for more than 16 years. The assets were held across 12 separate addresses, each containing a 50 BTC block reward from that period. At the time of the transfers, the combined holdings were worth approximately $48 million.

Because the Bitcoin originated from the network’s early period, the movement triggered speculation about whether the addresses could be associated with Satoshi Nakamoto. However, Whale Alert, which analyzed the transactions, said none of the 12 block rewards could be linked to Nakamoto based on the available data.

Another important distinction is the difference between a transfer and a sale. The movement of 600 BTC does not automatically mean that the assets have entered the market. The transfers went to new, unlabeled wallets rather than known exchange deposit addresses. The available on-chain data therefore does not confirm direct selling activity.

The reactivation of early Bitcoin addresses remains notable when tracking the behavior of long-dormant supply. Whether these BTC remain at their new addresses or are later transferred to other wallets or trading platforms could provide additional information about the purpose of the transactions.

Also see. Bitcoin mining

Ethereum Considers Transaction Changes Through EIP-8141

Ethereum developers are working on EIP-8141, a proposal designed to change how transactions are validated and executed and how gas payments can be handled on the network. Co-authored by Vitalik Buterin, the proposal introduces a new transaction type known as a “Frame Transaction.”

Under EIP-8141, a single transaction can contain up to 64 separate frames. The structure is designed to allow multiple actions to be executed within the same transaction sequence, give accounts more flexibility in how transactions are validated and support alternative mechanisms for gas payments.

Another important part of the proposal is the ability to decouple accounts from the ECDSA keys used today. This could enable native key rotation and is also being considered as part of the infrastructure that could make Ethereum’s future transition toward post-quantum signature systems easier. Ethereum’s official roadmap identifies EIP-8141 as one element of its post-quantum security transition strategy.

However, EIP-8141 currently remains in Draft status. The proposal is being considered for inclusion in the Hegotá upgrade targeted for 2027, and no final activation decision has been made. The development therefore represents ongoing work on Ethereum’s future transaction and account architecture rather than a change that is already active on the network.

Berlin Rejects 30 BTC Ransom Demand

Following a cyberattack on Berlin’s state administration, the Rhysida ransomware group demanded a minimum payment of 30 Bitcoin for approximately 5.7 terabytes of data it claimed to have stolen. Berlin said it would not pay the ransom, and the attackers published the stolen data on the dark web after the deadline expired.

According to Berlin authorities, attackers extracted data from parts of the state network between August 7 and August 12. The incident was detected on August 14. Two state departments responsible for construction and transport were among those affected. Subsequent assessments indicated that approximately 1.44 million files may have been involved.

Bitcoin’s role in the incident needs to be separated from the attack itself. The Rhysida incident was not caused by a vulnerability in the Bitcoin network or protocol. BTC was simply the payment method requested by the attackers for the ransom.

Berlin established a central crisis unit to review the scope and authenticity of the published data. Determining which personal or organizational information was affected and notifying the relevant individuals will provide a clearer picture of the incident’s impact.

CoinTR Insight

Today’s three developments show how similar-looking crypto headlines can represent very different underlying events. The movement of long-dormant Bitcoin does not automatically represent selling, while the publication of an Ethereum Improvement Proposal does not mean that the feature is already active on the network. Likewise, attackers demanding a ransom in BTC should not be interpreted as the Bitcoin network itself being compromised.

For that reason, assessing market developments requires looking beyond the headline and examining the destination of on-chain transfers, the current status of protocol developments and the technical source of cybersecurity incidents. Under changing market conditions, CoinTR’s USDT/TRY trading flow also provides a way to monitor crypto market pricing and liquidity movements from a Turkish-lira perspective.

Forward-Looking Takeaway

The next movement of 600 BTC: The fact that Bitcoin has been moved to new addresses does not indicate that a sale has occurred. Whether the assets are later transferred to known trading-platform addresses could provide more meaningful information about the nature of the transactions.
EIP-8141 and the Hegotá process: EIP-8141 remains in draft status and is being considered for Hegotá. Whether developer teams ultimately include the proposal and how its technical specifications evolve will determine how Ethereum’s account and transaction architecture develops.
Berlin’s data review: Authorities are continuing to assess the data published after the ransom was rejected. The scope of the affected files, the nature of the personal information involved and subsequent security measures will determine the longer-term impact of the attack.

2026-09-07

Legal Notice

The information, comments, and evaluations contained in this content do not constitute investment advice. This content is not intended to be prescriptive in any way and is intended to provide general information. It does not constitute investment advice. CoinTR cannot be held responsible for any transactions made based on this information or any losses that may arise.

Buying Bitcoin in the Crypto Market and New Regulations ETFs, Regulation, and Security in the Crypto Market prevIcon

Recommended