Coldcard Wallet Breach: 15 Hackers Steal $130M in Bitcoin
Galaxy Research identifies 15 separate attackers exploiting the security flaw.
1Scope of the Vulnerability
Galaxy Research has identified 15 distinct hackers exploiting a firmware flaw in Coldcard hardware wallets. The vulnerability stems from a weakness in the private key generation process. Over $130 million in Bitcoin has been stolen from more than 7,300 wallets so far. According to Coinkite's latest warning, the threat persists and further losses are expected.
2Technical Details of the Flaw
The Coldcard firmware was redirecting wallet seed generation through MicroPython's software fallback instead of using a true random number generator. This process resulted in seeds with only 40 bits of entropy for Coldcard Mk2 and Mk3 devices. While Mk4 devices improved this to 72 bits, it still fell short of the expected 128-bit security standard.
3Company Response and Measures
Coinkite took responsibility for the bug in a July 31 statement on X and released emergency patches for all affected models. The company urged users to transfer funds to newly created, unaffected wallets. However, the threat continues as vulnerable wallet addresses remain visible on Bitcoin's public blockchain.
4Hackers' Methodology
Attackers can identify vulnerable wallet addresses thanks to Bitcoin's transparent nature and attempt to crack private keys using brute-force methods. Galaxy Research reports dozens of victims have come forward, but the actual number of affected users could be much higher. Long-term Bitcoin holders might not realize their wallets are at risk.
5Industry Impact
This incident raises serious questions about the reliability of hardware wallets. Coldcard was known for its security in the industry. The $130 million loss highlights the risks in crypto storage solutions. Other hardware wallet manufacturers might increase their security audits following this event.
6Risks for Users
Since the vulnerability is public knowledge, any technically skilled hacker could join the attack. Users who generated seeds on affected firmware versions remain at risk until they transfer their Bitcoin to new wallets. Coinkite expressed concerns that less tech-savvy users might not be aware of this warning.
7Historical Precedents
The crypto industry has witnessed similar security breaches before. In 2020, Ledger's data breach exposed personal information of 270,000 users. However, the Coldcard incident has more severe consequences as it directly led to fund losses. Such events emphasize the importance of additional security layers like multi-signature in crypto asset management.
8Future of the Industry
The Coldcard attack demonstrates the need for stricter security standards in crypto storage solutions. Hardware wallet manufacturers may need to enhance their product security audits. Users might consider multiple wallet strategies and cold storage solutions more seriously. This event could increase awareness about crypto security practices.
Original article: DailyCoin — Coldcard Cüzdan Açığı: 15 Hacker 130 Milyon Dolarlık Bitcoin Çaldı