one of the biggest hardware wallet security failures in bitcoin history
> ColdCard bitcoin-only hardware wallet by coinkite
> launched in 2017
> known for air gapped security and offline signing
> used by bitcoin OGs, whales and institutions worldwide
until this week
> researchers uncovered a critical vulnerability affecting wallet seed generation
> victims didn't click phishing links
> attackers exploited predictable randomness used during wallet creation
> estimated damage over 1390 $BTC (~$88M) stolen
> around 500 wallets compromised
> many wallets had been untouched for years before being drained within hours
then reddit exploded
> one user reported losing 18.25 $BTC
> another said years of weekly DCA vanished overnight
> multiple victims claimed their entire life savings disappeared
if your wallet was created using vulnerable firmware,
your bitcoin may have already been at risk
the only safe fix generate a brand new wallet using secure entropy
> ColdCard bitcoin-only hardware wallet by coinkite
> launched in 2017
> known for air gapped security and offline signing
> used by bitcoin OGs, whales and institutions worldwide
until this week
> researchers uncovered a critical vulnerability affecting wallet seed generation
> victims didn't click phishing links
> attackers exploited predictable randomness used during wallet creation
> estimated damage over 1390 $BTC (~$88M) stolen
> around 500 wallets compromised
> many wallets had been untouched for years before being drained within hours
then reddit exploded
> one user reported losing 18.25 $BTC
> another said years of weekly DCA vanished overnight
> multiple victims claimed their entire life savings disappeared
if your wallet was created using vulnerable firmware,
your bitcoin may have already been at risk
the only safe fix generate a brand new wallet using secure entropy