ColdCard

Coldcard, a manufacturer of offline crypto storage devices, was hit by a security lapse that resulted in at least $100 million worth of Bitcoin being stolen from customers. The breach occurred because Coldcard failed to implement a randomized process for creating seed phrases, instead relying on a predictable pattern that allowed hackers to guess others. This incident has sparked debate about the reliability of hardware wallets versus using reputable exchanges.

A Bitcoin Red Team identified 85 critical flaws across 390 open-source repositories following the Coldcard hardware wallet exploit, which resulted in over $100 million in losses. The team, led by Calle and Rob Hamilton, used AI models to audit Bitcoin-related software, uncovering 4,962 total findings, including 635 high-severity issues.

A phishing campaign is exploiting concerns about a COLDCARD wallet vulnerability and a suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. The attack leverages fears surrounding the security audit to deploy malicious tools.

The Coldcard entropy flaw has raised concerns about the security of hardware wallets, leading to a crisis of confidence. The article highlights the implications for Ledger, Trezor, and Foundation wallets.

A $120 million hack involving Coldcard devices has impacted Bitcoin's memory pool.

US spot Bitcoin ETFs recorded $382 million in two-day inflows, with Galaxy’s Bitcoin ETF returning to gains. The Coldcard incident has reignited concerns about custody in the Bitcoin ecosystem.

A Coldcard hack has prompted a self-custody security overhaul, as highlighted by Cory Klippsten. The incident underscores concerns about cryptocurrency wallet security and potential systemic improvements.

A hack on Coldcard hardware wallets exploited flawed entropy generation in key creation, leading to the theft of over 1,300 bitcoins and prompting users to move funds to custodial exchanges. The incident challenges assumptions about self-custody security while emphasizing the need to preserve Bitcoin's decentralized principles.

Ledger's CTO Charles Guillemet highlights the Coldcard exploit as evidence that Bitcoin wallet security requires certified hardware randomness and must evolve with advancements in AI.

A Toronto-based company that produces Coldcard, a bitcoin-only hardware wallet, has suffered a data breach resulting in the theft of $100 million worth of bitcoin.

A flaw in Coldcard wallets resulted in over $100 million lost to Bitcoin holders, sparking renewed debate about the reliability of dice in cryptographic key generation.

A Bitcoin address holding $31.8 million in dormant coins moved its funds after 12 years, coinciding with a Coldcard wallet hack that has drained an estimated $130 million. Hackers exploited a vulnerability in Coldcard wallets, prompting warnings about security risks and urging investors to transfer funds to safer setups.

Galaxy reported that at least 15 attackers exploited a Coldcard vulnerability. Dragonfly’s managing partner stated the issue could have been avoided with $2 worth of AI hardening.

OKX reported that a Coldcard exploit led to record inflows to centralized exchanges. The exchange also stated it prevented $26.3 million in scam-related losses by blocking suspicious transfers in the first half of the year.

Coldcard is urging users to move their Bitcoin due to an ongoing exploit. The exploit is still in progress, prompting the security advisory.

Hardware wallet firms are warning about a surge in phishing attacks targeting Coldcard users, with fake 'coordinated hardware audit' emails directing victims to a cloned Coldcard site that installs remote-access software. Losses from these attacks are nearing $130 million.

Galaxy Research estimates Bitcoin losses from the Coldcard hack could reach $130 million. The firm suspects the total loss may increase further if a fourth, unconfirmed wave of attacks is included.

Bitcoin approaches $64,000 as traders overlook Strategy's BTC sales and Coldcard sweeps. The cryptocurrency's price rise suggests market resilience amid these developments.

Air-gapped wallets store private keys offline, reducing hacker exposure but not eliminating threats. The Coldcard exploit highlights vulnerabilities in offline security systems.

Jameson Lopp discusses how a Coldcard exploit highlights the limitations of Bitcoin's 'don't trust, verify' principle. He notes that AI is transforming wallet security by enabling attackers to find vulnerabilities and developers to audit code more efficiently.

Hackers have stolen over $114 million in Bitcoin from Coldcard wallets due to a firmware bug in Coldcard Mk3 devices, allowing seedphrase guessing. Coinkite, the company behind Coldcard, confirmed all models were vulnerable and halted shipments of the product.

The Coldcard Bitcoin hack is approaching $114 million in potential losses. The article highlights that self-custody in cryptocurrency is under attack, with AI identified as a leading threat to the industry.

Bitcoin and ether prices have declined as the Coldcard exploit continues into its fifth day, raising concerns in the cryptocurrency market.

Coldcard losses are nearing $114 million as Bitcoin transfers under 1 BTC surge to levels last seen after the FTX collapse. Galaxy Research has warned of a potential fourth wave of thefts linked to the activity.

Bitcoin's price fell below $63,000 despite expectations from an Iran deal, as losses linked to Coldcard impacted the market.

A five-year-old flaw in Coldcard's hardware wallet went undetected because auditors confirmed the presence of a random number generator but failed to verify its implementation. Kraken's security chief highlighted this gap in hardware wallet testing.

Galaxy's Alex Thorn warned Coldcard users about a suspected fourth attack wave that may have stolen 389 Bitcoin, noting unconfirmed transactions could offer a chance to save funds.

A $90 million Bitcoin loss from cold storage due to a Coldcard exploit has negatively impacted market sentiment. The Clarity Act remains stalled with only five days left before a potential Senate vote.

A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator.

A third wave of thefts from Coldcard Bitcoin wallets has increased observed losses to approximately 1,367 BTC across 4,585 addresses, according to Galaxy Research. Attackers continue draining the wallets, pushing the total value stolen to around $88 million.

The $89 million Coldcard exploit has caused investors to send Bitcoin back to exchanges, contrasting with the FTX collapse. The incident highlights a security issue in cryptocurrency exchanges.

Bitcoin users moved 39,600 BTC in small transactions amid the ongoing Coldcard hack, which researchers warn remains active. CryptoQuant reported this as the largest sub-1 BTC movement since the FTX incident.

A firmware flaw in Coldcard hardware wallets, made by Coinkite, was linked to a $70.2 million Bitcoin theft involving 1,082.65 BTC drained from 1,196 addresses in 41 minutes on July 30. Galaxy Research traced the attack to a March 2021 integration error that used a deterministic software pseudorandom number generator for seed generation.

Galaxy Research identified 1,196 addresses that lost 1,082.65 Bitcoin in a 41-minute window, expanding the estimated scope of the Coldcard wallet incident. The Bitcoin loss estimate has risen to $70M following this analysis.

Binance founder CZ has urged users to diversify their cryptocurrency wallets following a $70 million exploit involving Coldcard. The incident highlights concerns about security in digital asset storage.

Over $70 million in Bitcoin was stolen via a Coldcard exploit, with the thief using a top blockchain services provider to facilitate the attack. Coinkite admitted all Coldcard models were vulnerable due to a firmware bug causing weak private key generation.

Galaxy Research reported that nearly 1,200 addresses were drained of over 1,000 BTC, worth approximately $70 million, due to a Coldcard vulnerability. The losses are linked to a security flaw in the Coldcard hardware wallet.

Coinkite released fixed firmware for Coldcard hardware wallets after a critical bug compromised private key generation, potentially stealing over 1,000 bitcoins. The vulnerability, likely involving AI in the breach, affected Coldcard MK3 devices with specific firmware versions. Users who did not use dice rolls or BIP 39 passphrases are at risk, and Coinkite advises firmware updates and wallet migrations to secure funds.

Coldcard's $38 million exploit has eroded confidence in self-custody solutions and may encourage investors to shift toward ETFs. The breach raises concerns about the security of self-managed cryptocurrency storage.

Coldcard wallets (MK3, MK4, MK5, Q) have a critical security vulnerability allowing attackers to brute-force seed phrases if generated without sufficient entropy (e.g., 50+ dice rolls). Funds are actively being drained, with 1000 BTC reported moved. Immediate action is required to move funds to secure wallets, use passphrases, or adopt alternatives like Nunchuck.