Coldcard Wallet Flaw Exposes Years of Bitcoin Seeds After $70M in BTC Stolen
A $70 million hack has exposed years of Bitcoin seeds due to a flaw in the Coldcard wallet. The company has urged users to take precautions and move their funds.
Intelligence analysis by Llama
A firmware bug in Coldcard devices has caused a flaw in wallet seed generation, allowing hackers to drain funds from 1,196 Bitcoin addresses. The company has advised users to take precautions and move their funds.
Imagine you have a special box that keeps your money safe. But someone found a way to break the box and steal all the money inside. This is what happened to the Coldcard wallet, which is a special box that keeps Bitcoin safe. The company that made the box is telling people to be careful and move their money to a safer place.
Analysis
A $70M Hack Exposes Years of Bitcoin Seeds
A recent hack has exposed years of Bitcoin seeds due to a flaw in the Coldcard wallet. The company has urged users to take precautions and move their funds. The hack has raised concerns about the security of the Coldcard wallet and has highlighted the importance of taking precautions to protect one's funds.
What Actually Happened
A firmware bug in Coldcard devices has caused a flaw in wallet seed generation. This bug has allowed hackers to drain funds from 1,196 Bitcoin addresses. The bug was caused by a weak software PRNG being used instead of the hardware true random number generator. This has made private keys for many single-signature wallets predictable enough for attackers to brute-force.
The Impact
A total of 594.5 Bitcoins worth over $35.7 million at today's prices were moved to a new address from single-signature addresses on Thursday. More wallets were later drained, according to blockchain analysts, with the total now over $70 million. Various affected users shared their experiences on social media, with one saying that their Bitcoin had not been moved since 2021, and all of a sudden was swiped.
What to Do
Developers in the Bitcoin space have since urged users to move their funds if they used a Coldcard. Coldcard has issued guidance for users to take, which can be found here. The company has advised users to review the official security guidance as soon as possible and to take precautions to protect their funds.
Key points
- A firmware bug in Coldcard devices has caused a flaw in wallet seed generation.
- Hackers have drained funds from 1,196 Bitcoin addresses.
- The company has advised users to take precautions and move their funds.
- Developers in the Bitcoin space are urging users to move their funds to safer places.
If the company fixes the bug and users take precautions, the situation could improve. The company has issued guidance for users to take, and developers in the Bitcoin space are urging users to move their funds to safer places.
The hack has exposed years of Bitcoin seeds, and the situation could get worse if users do not take precautions. The company has advised users to review the official security guidance as soon as possible, but some users may not take action in time.
