The story so far
Coldcard Bitcoin Hack
Tracked across 3 sources · Updated 3h ago
Security researchers reported a critical exploit in Coldcard hardware wallets that drained Bitcoin from thousands of wallets. The attack waves swept over $86 million, prompting warnings of further incidents and industry scrutiny of Coinkite's operations.
How it unfolded
13h ago
Total losses reach $86 million across 4,500 wallets
13h ago
Analysts warn of fourth attack wave
3d ago
Larger automated attack takes 1,082 BTC
4d ago
First wave steals 584 BTC from 500 wallets
What happened earlier
Latest updates
Latest
Full story →Coldcard hack steals $86 million in bitcoin from more than 4,500 wallets
Hackers exploited a software flaw in Coldcard, a hardware Bitcoin wallet from Coinkite Inc., to steal about 1,367 Bitcoin ($86 million) from over 4,500 wallets.
The flaw was in the software used to generate seed phrases, which were predictable due to deterministic values like device serial numbers in the random-number generator, according to Block Inc.'s engineering team.
Attackers could recreate users' private keys and drain their Bitcoin, despite the wallets being offline, highlighting that cold storage doesn't guarantee safety if key generation is flawed.
Earlier · 3d ago
Full story →Bitcoin Wallet Exploit Costs Users $38 Million in 25-Minute Attack
A flaw in Coldcard hardware wallet's key generation process led to theft of 584 Bitcoin (worth around $38 million) from 500 wallets in 25 minutes.
Security researchers linked the vulnerability to how wallet seeds were generated in certain firmware versions.
Coinkite, the maker of Coldcard, acknowledged the findings.
Coinkite and Block are investigating the extent and exploitability of the issue.
Earlier · 2d ago
Full story →Why Strike CEO Calls Coldcard Wallet Drain ‘One Of The Most Serious’ Bitcoin Hack
