Un rapport de Galaxy Research révèle que le nombre de Bitcoins volés via la faille de génération de seeds des Coldcard Mk3 a doublé, atteignant environ 1083 BTC (70 millions de dollars). L'attaque initiale, survenue le 30 juillet, a touché 1196 adresses avant l'alerte publique de Coinkite.
Bitcoin donanım cüzdanı Coldcard'da tespit edilen güvenlik açığı nedeniyle çalınan Bitcoin miktarı, ilk tahminlerin neredeyse iki katına çıkarak 1.082 BTC'ye (70 milyon dolar) ulaştı. Sorun, cihazın seed üretimindeki rastgele sayı üreticisinin hatalı çalışmasından kaynaklanıyor.
Binance founder Changpeng "CZ" Zhao warned crypto owners about hardware wallet vulnerabilities after a Coldcard exploit drained over $70 million in Bitcoin. A flaw in firmware shipped in March 2021 allowed private keys to be guessed, affecting 1,196 addresses, prompting Coinkite to issue hotfixes.
Galaxy Research identified 1,196 addresses linked to a Coldcard wallet incident where 1,082.65 Bitcoin ($70.2 million) was lost on July 30. Coinkite, Coldcard's maker, acknowledged a firmware bug and released a hotfix, advising affected users to move funds to a new seed.
Coinkite's Coldcard hardware wallets experienced a flaw where seeds were generated from a software fallback instead of hardware, leading to an estimated $38 million in Bitcoin losses from 500 wallets. The company suspects AI was used to exploit the vulnerability.
