Coldcard Bitcoin Wallet Hack Results in $89 Million Loss for Users
An ongoing cyberattack on Coinkite's Coldcard Bitcoin wallet has resulted in the theft of approximately $89 million. The attack began on July 30, with Galaxy Research tracking the initial wave that drained 1,082.65 Bitcoin, valued at $70 million, from 1,196 addresses within 41 minutes. The funds were traced to four attacker-controlled addresses, suggesting the activity was automated. Subsequent waves on August 1 increased the total stolen to 1,367 Bitcoin, affecting 4,385 addresses. The attack exploits a firmware vulnerability from 2021, where the wallet's random-number generator failed, allowing attackers to reproduce wallet keys offline. Coinkite has released updated firmware to address the issue and advised users to move funds to secure locations. 
