SWISS BITCOIN PAY WENT DARK — THE COINS WERE NEVER THERE TO TAKE

Swiss Bitcoin Pay pulled its own servers offline on September 14. The company’s words, posted to its account, were that a malicious user had likely gained access to its internal systems and that it was shutting down as a precaution while it investigated.

Here is what did not happen. No coins moved. No private keys were at risk. That is not luck and it is not a fast incident response. It is the design. Swiss Bitcoin Pay does not hold customer money: a merchant’s payments go straight to that merchant’s own wallet. There was no pot for an intruder to reach, because the company never built one.

What is still open is the database. Bitcoin.com reports that emails, bitcoin addresses, IBANs, transaction history and hashed passwords were exposed. Cryptobriefing, writing the same day, says the company has released no statement on scope at all. Both cannot be current, and the gap between them is the entire risk.

If a bank account number sat in a row next to a bitcoin address, that pairing does not expire. Coins move to a new wallet in ten minutes. A bitcoin address is public forever, and so is every payment that ever touched it. You can change a password today. You cannot change where your money has already been.

Watch for the scope statement. The fund statement was never the hard part.

At the time of this writing, bitcoin was $79,196 at 3:26 PM ET on Crypto.com.