WaterPlum fake recruiters hit 30,000 devices and 7,000 wallets for $10.7M+
A multi-country advisory ties the North Korea-linked campaign to malware delivered through hiring workflows.
Start hereWallet “types” mainly differ by where the private key lives and what you expose when you sign transactions and dapp approvals.

ERC-4337 routes wallet actions through UserOperations, bundlers, and EntryPoint, creating a parallel inclusion and fee market to normal Ethereum transactions.

They replace a single seed phrase with either off-chain threshold signing via MPC or on-chain recovery rules in a smart contract wallet.

A multisig wallet executes transactions only after a preset threshold of signers approves, turning key custody into an explicit approval pipeline.

MPC wallets split signing authority into key shares so m-of-n approvers can produce one normal on-chain signature without reconstructing a full private key.

A hardware wallet keeps private keys off your laptop or phone by signing transactions inside the device and showing the final details on a trusted screen.
A multi-country advisory ties the North Korea-linked campaign to malware delivered through hiring workflows.
The toolkit lets agents read and prepare transactions, but execution still requires physical confirmation on a Ledger device.