#coldcard
coldcard
160,555 views
518 Discussing
Hot
Latest
ยท
--
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontarioโs Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets arenโt absolutely safe eitherโif the seed-generation process fails, being offline wonโt protect you.
#$BTC #Coldcard #Hardware wallet
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontarioโs Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets arenโt absolutely safe eitherโif the seed-generation process fails, being offline wonโt protect you.
#$BTC #Coldcard #Hardware wallet
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets arenโt absolutely safe eitherโif the seed-generation process fails, being offline wonโt protect you.
#$BTC #Coldcard #Hardware wallet
4
Bought a hardware wallet for peace of mind, only to find out its seed phrase was โpseudorandom.โ Coinkiteโs Coldcard has been exposed: a March 2021 firmware update secretly disabled the chipโs true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontarioโs Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is goneโmove everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
Bought a hardware wallet for peace of mind, only to find out its seed phrase was โpseudorandom.โ Coinkiteโs Coldcard has been exposed: a March 2021 firmware update secretly disabled the chipโs true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontarioโs Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is goneโmove everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
$ETH $SOL
#Coldcard #HardwareWallet
107
ใMarket UpdateใThe most ironic part isnโt that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTCโworth about $38 millionโin just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware wonโt protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturerโs word?
$BTC $ETH $SOL
#ๆฏ็นๅธ #็กฌไปถ้ฑๅ
#Coldcard
๏ผSource: Bitcoin.com News๏ผ
โ ๏ธRisk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
ใMarket UpdateใThe most ironic part isnโt that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTCโworth about $38 millionโin just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware wonโt protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturerโs word?
$BTC $ETH $SOL
#ๆฏ็นๅธ #็กฌไปถ้ฑๅ #Coldcard
๏ผSource: Bitcoin.com News๏ผ
โ ๏ธRisk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
$BTC $ETH $SOL
#ๆฏ็นๅธ #็กฌไปถ้ฑๅ #Coldcard
๏ผSource: Bitcoin.com News๏ผ
โ ๏ธRisk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
9
ยท
--
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPythonโs Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontarioโs Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPythonโs Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontarioโs Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
The claim alleges that firmware dating back to March 2021 switched to MicroPythonโs Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontarioโs Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
52
ยท
--
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase FlawA hardware wallet has landed in Ontario Superior Courtโthe plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPythonโs non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contractโthese are all allegations by the plaintiff and have not been adjudicated.
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase Flaw
A hardware wallet has landed in Ontario Superior Courtโthe plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPythonโs non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contractโthese are all allegations by the plaintiff and have not been adjudicated.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPythonโs non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contractโthese are all allegations by the plaintiff and have not been adjudicated.
145
ยท
--
๐จ $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys ๐
The recent Ontario classโaction filing reveals that Coldcardโs firmware has been running a predictable PRNG since Marchโฏ2021, turning what should be a oneโtime seed into a replayable script. ๐ฆ Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweepโif a malicious actor ever extracts the mnemonic, they can frontโrun your stash. ๐ Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardwareโbased RNG. ๐ก
๐ฌ Are you planning a wallet migration this week or waiting for a patch? ๐
โ ๏ธ Not financial advice. Always manage your risk. ๐ก๏ธ
๐ท๏ธ #BTC #Coldcard #Security #Crypto
๐ฅ ๐
๐จ $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys ๐
The recent Ontario classโaction filing reveals that Coldcardโs firmware has been running a predictable PRNG since Marchโฏ2021, turning what should be a oneโtime seed into a replayable script. ๐ฆ Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweepโif a malicious actor ever extracts the mnemonic, they can frontโrun your stash. ๐ Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardwareโbased RNG. ๐ก
๐ฌ Are you planning a wallet migration this week or waiting for a patch? ๐
โ ๏ธ Not financial advice. Always manage your risk. ๐ก๏ธ
๐ท๏ธ #BTC #Coldcard #Security #Crypto
๐ฅ ๐
The recent Ontario classโaction filing reveals that Coldcardโs firmware has been running a predictable PRNG since Marchโฏ2021, turning what should be a oneโtime seed into a replayable script. ๐ฆ Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweepโif a malicious actor ever extracts the mnemonic, they can frontโrun your stash. ๐ Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardwareโbased RNG. ๐ก
๐ฌ Are you planning a wallet migration this week or waiting for a patch? ๐
โ ๏ธ Not financial advice. Always manage your risk. ๐ก๏ธ
๐ท๏ธ #BTC #Coldcard #Security #Crypto
๐ฅ ๐
9
โ๐ข Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026โa breach involving an unofficial Ledger reseller and a Coldcard firmware flawโresulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the walletโs chip wasnโt compromised: the problem was whereโฆ
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
โ๐ข Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026โa breach involving an unofficial Ledger reseller and a Coldcard firmware flawโresulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the walletโs chip wasnโt compromised: the problem was whereโฆ
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
Just two incidents in 2026โa breach involving an unofficial Ledger reseller and a Coldcard firmware flawโresulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the walletโs chip wasnโt compromised: the problem was whereโฆ
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
31
๐จ BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
โ ๏ธ WHAT HAPPENED?
๐ธ The message posed as an urgent security warning.
๐ธ It directed users to a fake page for a supposed funds migration.
๐ธ COLDCARD removed the post and is investigating how it appeared.
๐จ WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
๐ก๏ธ HOW TO PROTECT YOUR FUNDS
1๏ธโฃ Donโt click migration links shared in suspicious posts.
2๏ธโฃ Never enter your recovery phrase (the words that give access to your funds) on a website.
3๏ธโฃ Verify alerts by going directly to the manufacturerโs website yourself.
4๏ธโฃ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
๐ OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesnโt guarantee that every link it posts is safe.
๐ WHAT WEโRE WATCHING
๐ด Risk: confirmed victims or new fraudulent posts.
๐ก Monitoring: investigation ongoing.
๐ข Improvement: source clarified and security measures strengthened.
โ ๏ธ Donโt confuse a fraudulent link with a confirmed device hack.
๐ ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
๐จ BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
โ ๏ธ WHAT HAPPENED?
๐ธ The message posed as an urgent security warning.
๐ธ It directed users to a fake page for a supposed funds migration.
๐ธ COLDCARD removed the post and is investigating how it appeared.
๐จ WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
๐ก๏ธ HOW TO PROTECT YOUR FUNDS
1๏ธโฃ Donโt click migration links shared in suspicious posts.
2๏ธโฃ Never enter your recovery phrase (the words that give access to your funds) on a website.
3๏ธโฃ Verify alerts by going directly to the manufacturerโs website yourself.
4๏ธโฃ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
๐ OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesnโt guarantee that every link it posts is safe.
๐ WHAT WEโRE WATCHING
๐ด Risk: confirmed victims or new fraudulent posts.
๐ก Monitoring: investigation ongoing.
๐ข Improvement: source clarified and security measures strengthened.
โ ๏ธ Donโt confuse a fraudulent link with a confirmed device hack.
๐ ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
โ ๏ธ WHAT HAPPENED?
๐ธ The message posed as an urgent security warning.
๐ธ It directed users to a fake page for a supposed funds migration.
๐ธ COLDCARD removed the post and is investigating how it appeared.
๐จ WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
๐ก๏ธ HOW TO PROTECT YOUR FUNDS
1๏ธโฃ Donโt click migration links shared in suspicious posts.
2๏ธโฃ Never enter your recovery phrase (the words that give access to your funds) on a website.
3๏ธโฃ Verify alerts by going directly to the manufacturerโs website yourself.
4๏ธโฃ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
๐ OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesnโt guarantee that every link it posts is safe.
๐ WHAT WEโRE WATCHING
๐ด Risk: confirmed victims or new fraudulent posts.
๐ก Monitoring: investigation ongoing.
๐ข Improvement: source clarified and security measures strengthened.
โ ๏ธ Donโt confuse a fraudulent link with a confirmed device hack.
๐ ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
131
ยท
--
Coldcard users: ignore the deleted โcritical firmwareโ warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
Coldcard users: ignore the deleted โcritical firmwareโ warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
127
ยท
--
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
1
193
ยท
--
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
๐ Key points and analysis:
โข The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
โข The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
โข The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
๐ก Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
๐ฌ How can you protect your digital assets from phishing attacks targeting cold-storage platformsโ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
๐ Key points and analysis:
โข The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
โข The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
โข The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
๐ก Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
๐ฌ How can you protect your digital assets from phishing attacks targeting cold-storage platformsโ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
๐ Key points and analysis:
โข The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
โข The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
โข The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
๐ก Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
๐ฌ How can you protect your digital assets from phishing attacks targeting cold-storage platformsโ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
82
ยท
--
A sneaky link slipped onto Coldcardโs X page, reminding us that even securityโfocused firms can be targeted.
๐ง In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
โ
What it means for you
โข Always doubleโcheck URLs before clicking, even on trusted accounts.
โข Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
โข Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
A sneaky link slipped onto Coldcardโs X page, reminding us that even securityโfocused firms can be targeted.
๐ง In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
โ What it means for you
โข Always doubleโcheck URLs before clicking, even on trusted accounts.
โข Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
โข Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
๐ง In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
โ What it means for you
โข Always doubleโcheck URLs before clicking, even on trusted accounts.
โข Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
โข Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
27
ยท
--
COLDCARDโs official X account posted a phishing message today: ๐จ โUrgent security updateโ claimed there was a vulnerability in the firmwareโs seed generation and urged users to migrate immediatelyโlinking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Donโt click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at whatโs wrong with the domain.
#้้ฑผ #COLDCARD #HardwareWallet
COLDCARDโs official X account posted a phishing message today: ๐จ โUrgent security updateโ claimed there was a vulnerability in the firmwareโs seed generation and urged users to migrate immediatelyโlinking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Donโt click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at whatโs wrong with the domain.
#้้ฑผ #COLDCARD #HardwareWallet
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Donโt click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at whatโs wrong with the domain.
#้้ฑผ #COLDCARD #HardwareWallet
127
ยท
--
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard โ
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard โ
#CryptoSecurity #Coldcard โ
64
ยท
--
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full ChainThe biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Hereโs what Iโm sharing with other equally curious friends.
ใFirst, the most important takeawayใ
The hacker didnโt brute-force guess the mnemonic, and he didnโt brute-force guess the private keyโboth of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full Chain
The biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Hereโs what Iโm sharing with other equally curious friends.
ใFirst, the most important takeawayใ
The hacker didnโt brute-force guess the mnemonic, and he didnโt brute-force guess the private keyโboth of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Hereโs what Iโm sharing with other equally curious friends.
ใFirst, the most important takeawayใ
The hacker didnโt brute-force guess the mnemonic, and he didnโt brute-force guess the private keyโboth of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
101
ยท
--
๐จ Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
๐ฐ Source: techcrunch.com
๐จ Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
๐ฐ Source: techcrunch.com
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
๐ฐ Source: techcrunch.com
10
ยท
--
๐จ Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
๐ฐ Source: news.livedoor.com
๐จ Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
๐ฐ Source: news.livedoor.com
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
๐ฐ Source: news.livedoor.com
11
ยท
--
๐จ Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
๐ฐ Source: biztoc.com
๐จ Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
๐ฐ Source: biztoc.com
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
โโโโโโโโโโโโโโ
๐ Impact: ๐ฅ Very High
๐ท๏ธ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
๐ฐ Source: biztoc.com
1
25
Log in to explore more content
Join global crypto users on Binance Square
โก๏ธ Get latest and useful information about crypto.
๐ฌ Trusted by the worldโs largest crypto exchange.
๐ Discover real insights from verified creators.
Email / Phone number
Trending Topics
1
#UniswapA16zSeekDeFiExemptionFromIllinoisCryptoTax
23,670 views
737 Discussing
2
#HKDollarStablecoinHKDAPToLaunchOnSolana
18,102 views
465 Discussing
3
#$1.5BInLeveragedCryptoBetsLiquidated
38,739 views
244 Discussing
4
#TrezorSaysCryptoBilisSoldWalletMayContainMaliciousComponents
2,717 views
67 Discussing
5
#KOSPIFalls3.53%BackBelow6000
61,740 views
1,083 Discussing
6
#AmazonSharesFallAbout7%InPremarketTrading
27,862 views
577 Discussing
7
#USMidtermElections
241,804 views
2,343 Discussing
8
#StrategySTRCReaches$99.95ForFirstTimeIn165Days
24,804 views
94 Discussing
9
#BinanceWillListPredictPREDICT
92,352 views
1,386 Discussing
10
#SwitzerlandFirstSpotBitcoinETFExpectedToTradeInNovember
3,105 views
110 Discussing