Coldcard Firmware Flaw Drains 594 BTC from 500 Wallets
A critical vulnerability in Coldcard hardware wallets' key generation was exploited, allowing an attacker to steal 594.48 BTC (worth over $38 million) from more than 500 wallets within 25 minutes. The funds were consolidated into a single address, with 562 BTC traced to it. Coinkite confirmed that Mk4, Mk5, and Q devices are affected, though less severely, and the flaw has existed since March 2021.
Detected & updated continuously · Source: Nebula
Mentioned
@COLDCARDwallet
@CoinkiteSources
@bitnoticias_
Coldcard tem falhas críticas e coloca 1.082 BTC em risco de roubo https://t.co/VhRAl1MNB5
@Unchained_pod
In today's Unchained Daily newsletter: 🔥 A Coldcard firmware flaw let an attacker drain 594 BTC from 500 wallets 📉 Coinbase posted a $359 million loss, its third straight quarterly miss 📬 IRS-CI warns of fake letters pushing crypto holders to a nonexistent portal 📈 Read the
@CointurkMedia
🚨 Coldcard açığı sonrası 500’den fazla adresteki 594,48 BTC tek cüzdana aktarıldı. 📉 Block Security, açığın Mart 2021’den bu yana birçok Coldcard modelini etkilediğini açıkladı. 🔐 Uzmanlar, $BTC varlıklarının yeni seed phrase ile yeni adreslere hemen taşınmasını öneriyor.
@Unchained_pod
🧵 562 of the stolen 594 BTC has been traced to a single address. Coinkite says its Mk4, Mk5, and Q devices are also affected, just less severely. https://t.co/b7QnEpVKiJ
@AshCrypto
THIS IS INSANE. $40,000,000 in $BTC was stolen because of the Coldcard wallet vulnerability. The attacker exploited a flaw in Coldcard's key generation and stole these funds within 25 minutes. Even cold wallets aren't safe now. https://t.co/vULxlMzJ26
@TedPillows
$40,000,000+ in $BTC was stolen because of the Coldcard wallet vulnerability. Terrible. https://t.co/5vZrZn1BJO
@Btcexpertindia
🚨 SECURITY ALERT: Over $38M in #Bitcoin has been stolen in what appears to be a major Coldcard wallet exploit. • Total Stolen: 594.48 $BTC ($38.2M) • Affected: ~500 wallets • Destination: bc1qnk... If you use a Coldcard, check your setups immediately and monitor official https://t.co/ahjaAztStc