A Trezor phishing scam promoted through a Google-sponsored ad has reportedly drained one user's life savings, the victim says. Elsewhere, BTCPay Server shipped an emergency patch for a critical flaw already under active exploitation.