Bits of Gold
Summary
Bits of Gold is Israel's largest regulated cryptocurrency broker, founded in 2013 and licensed by the Israeli Capital Market, Insurance and Savings Authority since 2022. On August 16-17, 2026, the company disclosed that a third-party analytics vendor breach exposed personal data on approximately 200,000 customers — including national ID numbers, bank account details, and public wallet addresses — stemming from CVE-2026-72898, an actively exploited zero-day in self-hosted Metabase software. Customer crypto funds and private keys were not compromised, and the company has engaged a cybersecurity incident-response firm while notifying Israeli regulators.
Connected Entities
1 entitiesTimeline(11 events)
2017-01-01
Israeli Supreme Court rules Bank Leumi may legally refuse banking service to Bits of Gold on anti-money-laundering grounds.
CTech / Calcalist2019-01-01
Israeli Supreme Court reverses earlier ruling, prohibiting Bank Leumi from blocking Bits of Gold's account — setting a precedent for Israeli crypto banking access.
CTech / Calcalist2022-09-23
Bits of Gold becomes the first active Israeli crypto company to receive a permanent financial-services license (no. 56716) from Israel's Capital Market, Insurance and Savings Authority.
crypto.news2026-04-27
Israeli regulators approve Bits of Gold's BILS stablecoin, pegged one-to-one to the Israeli shekel, following approximately two years in a regulatory sandbox.
crypto.news / Analytics Insight2026-08-06
Metabase discloses active exploitation of CVE-2026-72898, a CVSS 10.0 unauthenticated SQL injection zero-day; CISA adds the flaw to its Known Exploited Vulnerabilities catalog.
The Hacker News / IONIX2026-08-13
Trezor reports approximately 14,000 customers' personal data exposed after fulfillment partner ShipMonk is compromised.
CoinDesk2026-08-16
Bits of Gold detects unauthorized access to a third-party data analytics system. The company blocks access and disconnects the affected system. Israeli Capital Market Authority and National Cyber Directorate are notified. An external cybersecurity incident-response firm is engaged.
crypto.news / CryptoTimes2026-08-16
SafePal reports data from nearly 40,000 users stolen after a third-party vendor breach.
CoinDesk2026-08-17
Bits of Gold publicly discloses the breach. Approximately 200,000 customers' personal data reported as exposed, including names, national ID numbers, emails, phone numbers, IP addresses, bank account details, and public wallet addresses. Company states no funds, private keys, passwords, CVV codes, or scanned ID documents were compromised.
CoinDesk / CryptoSlate / FinanceFeeds2026-08-17
Paz reportedly suspends Bitcoin purchases through its Yellow convenience store app following the Bits of Gold breach disclosure.
CryptoSlateDecision Log
- #1publish⛓ pending8/17/2026, 11:40:26 PMhash: 5kaNNMHNmMogfSAxSAUjeZ6VFgJgPNwA74G5sLJ1HBnj
9 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/17/2026, 11:40:18 PM
last updated: 8/18/2026, 9:58:27 AM
avoid.net — verified advice for a post-truth world