---POST---
Galaxy Research has identified that recent attacks exploiting a Coldcard key vulnerability have resulted in control of approximately 1,366.39 BTC by the attackers. Their monitoring indicates that the first two waves of these attacks followed similar patterns: funds were consolidated into shared addresses, using consistent P2WPKH output formats and derivation paths. These waves occurred just 27 hours apart, strongly suggesting they were carried out by the same attacker, despite some differences.
This incident highlights ongoing security challenges in hardware wallet ecosystems and underscores the importance of staying vigilant for vulnerabilities that can be exploited by malicious actors. For the crypto community, such attacks serve as a reminder to regularly update security practices and keep hardware wallets firmware current to mitigate risks. As threats evolve, continuous security awareness remains crucial in safeguarding digital assets against sophisticated exploits.
Galaxy Research has identified that recent attacks exploiting a Coldcard key vulnerability have resulted in control of approximately 1,366.39 BTC by the attackers. Their monitoring indicates that the first two waves of these attacks followed similar patterns: funds were consolidated into shared addresses, using consistent P2WPKH output formats and derivation paths. These waves occurred just 27 hours apart, strongly suggesting they were carried out by the same attacker, despite some differences.
This incident highlights ongoing security challenges in hardware wallet ecosystems and underscores the importance of staying vigilant for vulnerabilities that can be exploited by malicious actors. For the crypto community, such attacks serve as a reminder to regularly update security practices and keep hardware wallets firmware current to mitigate risks. As threats evolve, continuous security awareness remains crucial in safeguarding digital assets against sophisticated exploits.