An attacker exploited weak seeds generated by certain Coldcard hardware wallets to steal bitcoin worth roughly tens of millions from hundreds of addresses on July 30. According to a deep analysis from Galaxy Research, the core theft unfolded in a tightly coordinated burst lasting about 25 minutes, while broader analysis later connected roughly 1,196 addresses […]
Bitcoin.com News•Jamie Redman1 Aug
A flaw in Coldcard seed generation reduced entropy on multiple models and firmware versions, leading to the theft of 594 BTC from 500 addresses.
The Daily Hodl•Daily Hodl Staff1 AugColdcard’s flawed randomness process left certain wallet seeds vulnerable, affecting hundreds of Bitcoin wallets.
AMBCrypto•Adewale Olarinde31 Jul
The incident underscores the critical need for rigorous firmware testing and swift vulnerability disclosures to protect digital assets.
CryptoBriefing•Editorial Team31 Jul
Chainalysis found that the Coldcard attacker stole roughly $30 million within 10 minutes after prioritizing the largest wallets. The $38 million-plus sweep reached 500 wallets and exposed lasting risks for seeds created on vulnerable firmware. Attacker Prioritized Coldcard Wallets With the Largest Balances Blockchain analytics firm Chainalysis revealed on July 31 that the attacker targeted […]
Bitcoin.com News•Kevin Helms31 Jul
Bitcoin Magazine Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report Experts have since said that those holding Bitcoin on a Coldcard device should move funds now. This post Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report first appeared on Bitcoin Magazine and is written by Mathew Di Salvo .
Galaxy said nearly 1,200 addresses were drained of more than 1,000 BTC worth roughly $70 million tied to a Coldcard vulnerability.
The Block•RT Watson31 Jul
Bitcoin Magazine Coinkite Releases Fixed Firmware After Coldcard Bug; AI Likely Involved In The Breach NVK stated that AI-assisted code review can now find latent bugs at a speed outpacing even the industry’s most seasoned experts, calling it a sober reality of the new AI paradigm. This post Coinkite Releases Fixed Firmware After Coldcard Bug; AI Likely Involved In The Breach first appeared on Bitcoin Magazine and is written by Juan Galt .
CoinDesk•Krisztian Sandor31 Jul
Bitcoin Magazine COLDCARD SECURITY RISK: IMMEDIATE ACTION REQUIRED IMPORTANT: Major security vulnerability discovered in Coldcard hardware wallets. For your own safety read disclosures and take necessary actions immediately. This post COLDCARD SECURITY RISK: IMMEDIATE ACTION REQUIRED first appeared on Bitcoin Magazine and is written by Shinobi .
Bitcoin Magazine Coldcard Wallet Flaw Exposes Years of Bitcoin Seeds After $70M in BTC Stolen Over $70 million in Bitcoin has been pinched. Coldcard has since urged its users to take precautions. This post Coldcard Wallet Flaw Exposes Years of Bitcoin Seeds After $70M in BTC Stolen first appeared on Bitcoin Magazine and is written by Mathew Di Salvo .
A Coldcard security issue has put Bitcoin hardware-wallet safety back under the microscope after reports that a firmware flaw affected seed generation...
NewsBTC•NewsBTC Editorial Team31 JulHow a $38M BTC exploit from about 500 hardware wallets happened.
AMBCrypto•Lennox Gitonga31 Jul
The incident underscores the critical need for robust security measures in hardware wallets, potentially boosting multi-signature adoption.
CryptoBriefing•Editorial Team31 Jul
Coldcard's makers say despite using "the best available AI models," it couldn't detect the bug that caused the theft of $38M worth of BTC.
Protos•Jacob Lyon31 JulBitcoin dev Peter Todd slams hardware wallet security after an entropy bug in Coldcard devices allowed hackers to brute-force and drain 594 BTC.
U.Today•Gamza Khanzadaev31 Jul
The company said the latest advisory reflects its early analysis and that a formal technical review will follow.
Some Coldcard Mk3 owners may need to move their Bitcoin. Coinkite says funds tied to seeds generated on firmware 4.0.1 or a later Mk3 release may be at risk. Bitcoin Core contributor instagibbs said he recreated the vulnerable seed on a newly initialized Mk3. Coinkite says Mk4 and Mk5 devices are also affected before firmware […]
CryptoSlate•Gino Matos31 Jul
Coinkite said it’s likely that an attacker used AI to review previous versions of its open source firmware to uncover a vulnerability.
An ongoing Coldcard Bitcoin theft has drained $38 million using weak wallet keys. Migrate your funds now.
BeInCrypto•Phil Haunhorst31 Jul