#coldcard
coldcard
160,557 views
518 Discussing
Hot
Latest
·
--
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontario’s Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontario’s Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
4
Bought a hardware wallet for peace of mind, only to find out its seed phrase was “pseudorandom.” Coinkite’s Coldcard has been exposed: a March 2021 firmware update secretly disabled the chip’s true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontario’s Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is gone—move everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
Bought a hardware wallet for peace of mind, only to find out its seed phrase was “pseudorandom.” Coinkite’s Coldcard has been exposed: a March 2021 firmware update secretly disabled the chip’s true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontario’s Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is gone—move everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
$ETH $SOL
#Coldcard #HardwareWallet
107
·
--
【Market Update】The most ironic part isn’t that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTC—worth about $38 million—in just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware won’t protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturer’s word?
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
【Market Update】The most ironic part isn’t that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTC—worth about $38 million—in just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware won’t protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturer’s word?
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
10
·
--
🚨 $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys 🛑
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
🚨 $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys 🛑
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
9
·
--
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
52
·
--
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase FlawA hardware wallet has landed in Ontario Superior Court—the plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase Flaw
A hardware wallet has landed in Ontario Superior Court—the plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
145
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
31
·
--
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
127
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
131
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
1
193
·
--
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
27
·
--
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
82
·
--
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
127
Coldcard’s security warning about its Mk3 model (affecting seeds generated after firmware 4.0.1) shows that no physical device is infallible against development failures.
In incidents of this magnitude, cryptocurrency cybersecurity requires a defense-in-depth strategy.
Placing absolute trust in the assurances of a single manufacturer represents a systemic risk. To mitigate exposure to hardware or software vulnerabilities, it is essential to implement additional layers of protection:
1. **Multisignature Schemes (Multisig):** Distribute private keys across different devices and manufacturers so that a failure in a single model does not compromise all the funds.
2. **Operational best practices:** Verify firmware integrity, avoid blindly relying on automated processes without backup, and isolate key-generation environments.
3. **Sovereignty and risk management:** Assume that the security of crypto assets does not rest solely on the tool you choose, but on the user’s ability to anticipate failures and decentralize risk.
History shows that no cold wallet is completely invulnerable; true financial resilience is built through diversification and complementary security layers managed by the user.
#Coldcard #Wallet #billeterafria #ciberseguridad #BTC $BTC $WBTC
Coldcard’s security warning about its Mk3 model (affecting seeds generated after firmware 4.0.1) shows that no physical device is infallible against development failures.
In incidents of this magnitude, cryptocurrency cybersecurity requires a defense-in-depth strategy.
Placing absolute trust in the assurances of a single manufacturer represents a systemic risk. To mitigate exposure to hardware or software vulnerabilities, it is essential to implement additional layers of protection:
1. **Multisignature Schemes (Multisig):** Distribute private keys across different devices and manufacturers so that a failure in a single model does not compromise all the funds.
2. **Operational best practices:** Verify firmware integrity, avoid blindly relying on automated processes without backup, and isolate key-generation environments.
3. **Sovereignty and risk management:** Assume that the security of crypto assets does not rest solely on the tool you choose, but on the user’s ability to anticipate failures and decentralize risk.
History shows that no cold wallet is completely invulnerable; true financial resilience is built through diversification and complementary security layers managed by the user.
#Coldcard #Wallet #billeterafria #ciberseguridad #BTC $BTC $WBTC
In incidents of this magnitude, cryptocurrency cybersecurity requires a defense-in-depth strategy.
Placing absolute trust in the assurances of a single manufacturer represents a systemic risk. To mitigate exposure to hardware or software vulnerabilities, it is essential to implement additional layers of protection:
1. **Multisignature Schemes (Multisig):** Distribute private keys across different devices and manufacturers so that a failure in a single model does not compromise all the funds.
2. **Operational best practices:** Verify firmware integrity, avoid blindly relying on automated processes without backup, and isolate key-generation environments.
3. **Sovereignty and risk management:** Assume that the security of crypto assets does not rest solely on the tool you choose, but on the user’s ability to anticipate failures and decentralize risk.
History shows that no cold wallet is completely invulnerable; true financial resilience is built through diversification and complementary security layers managed by the user.
#Coldcard #Wallet #billeterafria #ciberseguridad #BTC $BTC $WBTC
Alexander Guevara
·
--
🟢
❎🚨 UPDATE: More than $10.5 billion in options for $BTC and $ETH are set to expire on Deribit tomorrow, which could drive an increase in market volatility.
❎THIS IS INCREDIBLE.
$40,000,000 in $btc were stolen due to a vulnerability in the Coldcard wallet.
The attacker exploited a flaw in Coldcard’s key generation and stole these funds in 25 minutes.
Even cold wallets aren’t safe anymore.
✅Bitcoin at critical support, breaks above $64k and heads straight to $60k; if you hold it, it will seek the highs at $67k.
✅And the Temu tubers putting in "big trades going long in gold" and getting liquidated... that’s why be careful with scammers.
$XAU #BTC #holder #Coldcard #GOLD #Liquidations
❎🚨 UPDATE: More than $10.5 billion in options for $BTC and $ETH are set to expire on Deribit tomorrow, which could drive an increase in market volatility.
❎THIS IS INCREDIBLE.
$40,000,000 in $btc were stolen due to a vulnerability in the Coldcard wallet.
The attacker exploited a flaw in Coldcard’s key generation and stole these funds in 25 minutes.
Even cold wallets aren’t safe anymore.
✅Bitcoin at critical support, breaks above $64k and heads straight to $60k; if you hold it, it will seek the highs at $67k.
✅And the Temu tubers putting in "big trades going long in gold" and getting liquidated... that’s why be careful with scammers.
$XAU #BTC #holder #Coldcard #GOLD #Liquidations
3
20
⚠️ Coldcard warning for Mk3 wallet users amid scrutiny over a $38 million Bitcoin wallet withdrawal
Coinkite, the manufacturer of the Coldcard wallet, has issued a warning to Mk3 users to move their funds after identifying a potential risk related to key generation. The warning comes as Bitcoin security experts investigate an unexplained $38 million withdrawal incident from Bitcoin wallets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoSafety #Wallet
📰 Source: cointelegraph.com
⚠️ Coldcard warning for Mk3 wallet users amid scrutiny over a $38 million Bitcoin wallet withdrawal
Coinkite, the manufacturer of the Coldcard wallet, has issued a warning to Mk3 users to move their funds after identifying a potential risk related to key generation. The warning comes as Bitcoin security experts investigate an unexplained $38 million withdrawal incident from Bitcoin wallets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoSafety #Wallet
📰 Source: cointelegraph.com
Coinkite, the manufacturer of the Coldcard wallet, has issued a warning to Mk3 users to move their funds after identifying a potential risk related to key generation. The warning comes as Bitcoin security experts investigate an unexplained $38 million withdrawal incident from Bitcoin wallets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoSafety #Wallet
📰 Source: cointelegraph.com
14
⚠️ Warnings of potential attacks targeting Coldcard wallets that siphon 389 Bitcoin
Galaxy research chief Alex Thorne warned of a possible fourth wave of attacks targeting Coldcard wallets, which led to the withdrawal of approximately 389 Bitcoin. Thorne noted that some unconfirmed transactions could provide users with a narrow window to save their funds.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
⚠️ Warnings of potential attacks targeting Coldcard wallets that siphon 389 Bitcoin
Galaxy research chief Alex Thorne warned of a possible fourth wave of attacks targeting Coldcard wallets, which led to the withdrawal of approximately 389 Bitcoin. Thorne noted that some unconfirmed transactions could provide users with a narrow window to save their funds.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
Galaxy research chief Alex Thorne warned of a possible fourth wave of attacks targeting Coldcard wallets, which led to the withdrawal of approximately 389 Bitcoin. Thorne noted that some unconfirmed transactions could provide users with a narrow window to save their funds.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
30
⚠️ Bitcoin loss estimates associated with the Coldcard wallet portfolio have reached $70 million
Recent analyses conducted by Galaxy Research revealed that losses connected to the Coldcard wallet incident have exceeded $70 million worth of Bitcoin. The company warned users about the need to move funds from affected addresses to protect their assets.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
⚠️ Bitcoin loss estimates associated with the Coldcard wallet portfolio have reached $70 million
Recent analyses conducted by Galaxy Research revealed that losses connected to the Coldcard wallet incident have exceeded $70 million worth of Bitcoin. The company warned users about the need to move funds from affected addresses to protect their assets.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
Recent analyses conducted by Galaxy Research revealed that losses connected to the Coldcard wallet incident have exceeded $70 million worth of Bitcoin. The company warned users about the need to move funds from affected addresses to protect their assets.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoNews #Wallet
📰 Source: cointelegraph.com
1
34
🚨 Theft of $89 million from Coldcard Bitcoin wallets
Users of Coldcard Bitcoin wallets suffered losses of approximately $89 million due to exploitation of an old vulnerability. This breach affected a number of wallets, highlighting the importance of updating security measures. An investigation has begun to understand the incident details and its full impact.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: infosecurity-magazine.com
🚨 Theft of $89 million from Coldcard Bitcoin wallets
Users of Coldcard Bitcoin wallets suffered losses of approximately $89 million due to exploitation of an old vulnerability. This breach affected a number of wallets, highlighting the importance of updating security measures. An investigation has begun to understand the incident details and its full impact.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: infosecurity-magazine.com
Users of Coldcard Bitcoin wallets suffered losses of approximately $89 million due to exploitation of an old vulnerability. This breach affected a number of wallets, highlighting the importance of updating security measures. An investigation has begun to understand the incident details and its full impact.
━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #CryptoNews #Wallet
📰 Source: infosecurity-magazine.com
54
⚠️ Software vulnerability discovered in Coldcard wallets leading to Bitcoin theft
A vulnerability in the firmware of Coldcard wallets caused the draining of approximately 1,196 Bitcoin addresses on July 30. This incident highlights the importance of mnemonic (Seed Phrase) generation mechanisms in the security of cold wallets and their potential impact on users’ assets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #Wallet #Cybersecurity
📰 Source: techspot.com
⚠️ Software vulnerability discovered in Coldcard wallets leading to Bitcoin theft
A vulnerability in the firmware of Coldcard wallets caused the draining of approximately 1,196 Bitcoin addresses on July 30. This incident highlights the importance of mnemonic (Seed Phrase) generation mechanisms in the security of cold wallets and their potential impact on users’ assets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #Wallet #Cybersecurity
📰 Source: techspot.com
A vulnerability in the firmware of Coldcard wallets caused the draining of approximately 1,196 Bitcoin addresses on July 30. This incident highlights the importance of mnemonic (Seed Phrase) generation mechanisms in the security of cold wallets and their potential impact on users’ assets.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #Wallet #Cybersecurity
📰 Source: techspot.com
5
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number
Trending Topics
1
#ASICHasReceivedNoPredictionMarketApplications
29 views
22 Discussing
2
#RecallAnnouncesLiquidationPlansToBurn35.86%OfSupply
0 views
1 Discussing
3
#TetherReports$191.5BInQ3Reserves
13 views
3 Discussing
4
#UniswapA16zSeekDeFiExemptionFromIllinoisCryptoTax
46,803 views
996 Discussing
5
#HKDollarStablecoinHKDAPToLaunchOnSolana
34,378 views
644 Discussing
6
#$1.5BInLeveragedCryptoBetsLiquidated
67,065 views
282 Discussing
7
#TrezorSaysCryptoBilisSoldWalletMayContainMaliciousComponents
5,744 views
93 Discussing
8
#KOSPIFalls3.53%BackBelow6000
81,096 views
1,221 Discussing
9
#AmazonSharesFallAbout7%InPremarketTrading
42,011 views
679 Discussing
10
#USMidtermElections
309,463 views
2,483 Discussing