A significant exploit targeting Coldcard hardware wallets has resulted in the theft of approximately $70 million worth of Bitcoin. The attack exploited a firmware flaw that weakened seed generation, enabling attackers to reconstruct private keys and access funds in dormant wallets. Binance founder Changpeng Zhao, known as CZ, has advised cryptocurrency holders to diversify their assets across multiple wallets in light of this incident. The stolen funds, totaling over 1,000 Bitcoin, are currently held in four distinct addresses, and reports suggest the perpetrator may have used a major blockchain services provider.
A security vulnerability in Coldcard hardware wallets has led to the theft of over 1,000 Bitcoin, valued at approximately $70 million. The exploit targeted a firmware flaw within the Coldcard Mk4 devices, which compromised the seed generation process. This weakness allowed attackers to reconstruct private keys, enabling them to access and steal Bitcoin from dormant wallets. In total, 1,196 Coldcard hardware wallets were affected by this exploit.
Following the incident, Binance founder Changpeng Zhao, widely known as CZ, has advised cryptocurrency holders to diversify their holdings across multiple wallets. This recommendation aims to mitigate the risk of a single point of failure, as demonstrated by the Coldcard exploit. The stolen funds remain concentrated in four specific blockchain addresses. Reports also indicate that the individual or group responsible for the theft may have utilized a prominent blockchain services provider in their operations.
The discovery of this vulnerability has prompted users of Coldcard wallets to take immediate action, with many advised to move their Bitcoin to more secure storage solutions. The nature of the firmware flaw, which affected seed generation, highlights a critical security concern for hardware wallet users and underscores the importance of robust security protocols in cryptocurrency storage.
A security vulnerability in Coldcard hardware wallets has led to the theft of over 1,000 Bitcoin, valued at approximately $70 million. The exploit targeted a firmware flaw within the Coldcard Mk4 devices, which compromised the seed generation process. This weakness allowed attackers to reconstruct private keys, enabling them to access and steal Bitcoin from dormant wallets. In total, 1,196 Coldcard hardware wallets were affected by this exploit.