Coldcard users face a new wave of coordinated Bitcoin thefts, with Galaxy's Alex Thorn flagging 709 affected addresses and 448.7 BTC moved. This follows a disclosed firmware flaw causing compromised wallet seeds, with total losses now estimated over $90 million.
A five-year-old seed-generation flaw in Coldcard hardware wallets, which inadvertently used a weaker random number generator, has led to nearly $90 million in Bitcoin being drained from over 4,500 addresses. Kraken CSO Nick Percoco highlights this as a critical weakness in hardware wallet independent testing, urging for verification of randomness sources.
Coldcard Bitcoin hardware wallet users are facing a new wave of coordinated thefts, with Galaxy research head Alex Thorn reporting 218 transactions impacting 462 addresses and moving 388.9 BTC. This follows the disclosure of a firmware flaw causing less entropy in wallet seeds, leading to an estimated $90 million in Bitcoin stolen from over 1,100 wallets.
Galaxy Research reports a third wave of Bitcoin thefts from compromised Coldcard hardware wallets, bringing total losses to $88.6 million across 4,585 addresses. The exploit, linked to a 2021 firmware flaw, is ongoing, with all vulnerable devices expected to be drained, prompting users to move funds.
Coinkite's Coldcard wallets suffered a firmware error, leading to 1,367 BTC ($89M) being drained. This caused a surge in Bitcoin transactions as users migrated funds, blurring market signals. US AI guardrails hindered tracing efforts, forcing investigators to use open-source Chinese models.
Smaller Bitcoin transfers reached levels not seen since FTX collapse, with 39,600 BTC moved on Friday, amid an ongoing suspected Coldcard hack. The incident, which has drained 1,367 BTC ($88.6M) from 4,585 addresses, reignites debate over Bitcoin self-custody vs. third-party platforms.
Un rapport de Galaxy Research révèle que le nombre de Bitcoins volés via la faille de génération de seeds des Coldcard Mk3 a doublé, atteignant environ 1083 BTC (70 millions de dollars). L'attaque initiale, survenue le 30 juillet, a touché 1196 adresses avant l'alerte publique de Coinkite.
Bitcoin donanım cüzdanı Coldcard'da tespit edilen güvenlik açığı nedeniyle çalınan Bitcoin miktarı, ilk tahminlerin neredeyse iki katına çıkarak 1.082 BTC'ye (70 milyon dolar) ulaştı. Sorun, cihazın seed üretimindeki rastgele sayı üreticisinin hatalı çalışmasından kaynaklanıyor.
Binance founder Changpeng "CZ" Zhao warned crypto owners about hardware wallet vulnerabilities after a Coldcard exploit drained over $70 million in Bitcoin. A flaw in firmware shipped in March 2021 allowed private keys to be guessed, affecting 1,196 addresses, prompting Coinkite to issue hotfixes.
Galaxy Research identified 1,196 addresses linked to a Coldcard wallet incident where 1,082.65 Bitcoin ($70.2 million) was lost on July 30. Coinkite, Coldcard's maker, acknowledged a firmware bug and released a hotfix, advising affected users to move funds to a new seed.
Coinkite's Coldcard hardware wallets experienced a flaw where seeds were generated from a software fallback instead of hardware, leading to an estimated $38 million in Bitcoin losses from 500 wallets. The company suspects AI was used to exploit the vulnerability.
