coldcardexploitattackerscontrol1366btc

Iwel sethi yokuqala yokuhlaselwa exhunywe engozini yesikhwama se-Coldcard esibikiwe iye yaphusha ukulahlekelwa okuphelele kwe-Bitcoin ngaphezu kuka-1,158 BTC, okulinganiselwa cishe ku-$75 million, ngokocwaningo oluvela kwaGalaxy Research. Amaza amabili okuhlasela kuthiwa athinte amakheli ezikhwama angu-2,673 phakathi kukaJulayi 30 noJulayi 31, okwenza kube esinye sezigameko ezinkulu zakamuva zokuphepha kwezikhwama ezizibambele zona.
I-Galaxy Research ibike ukuthi ukuhlasela kokuqala kukhiphe ngaphezu kuka-1,082 BTC kumakheli angu-1,195 ngaphansi kwehora elilodwa, kanti enye imikhankaso yesibili yahlasela amanye amakheli angu-1,478, yebeza amanye ama-76 BTC emahoreni ambalwa. Nakuba ukuhlasela kwesibili kuthinte izikhwama eziningi, ibhalansi evamile eyebiwe kumuntu ngamunye eyayihlukunyeziwe yayingaphansi kakhulu kunasemzuliswaneni wokuqala.

Galaxy Research has revised the Coldcard attack losses upward. Three waves have now drained 1,367 BTC from 4,585 addresses.
📊 The Numbers
Total drained: 1,367.05 $BTC (~$88.6M)
Addresses affected: 4,585
Attack waves: 3
Wave 1 (July 30):
1,082.65 BTC1,196 addresses41 minutes
Wave 2 (July 31):
76.16 BTC1,478 addresses
Wave 3 (Aug 1):
207.73 BTC1,912 addresses
🔍 How Each Wave Was Different
Wave 1: Same fee, no change outputs, one victim per transaction
Wave 2: Similar pattern to wave 1
Wave 3:
Different transaction patternIndividual destinations (not shared collector addresses)Batching multiple victims per sweepOnly checking the default derivation path
Galaxy said it is confident each wave is one operator. But they can't confirm if the same attacker is behind all three.
⚙️ Technical Details
Affected devices:
Mk2 and Mk3: firmware 4.0.1 through 4.1.9Mk4 and Mk5: before standard version 5.6.0Q: before version 1.5.0Q
The flaw: Software randomiser instead of hardware one
Effective search space:
Mk2/Mk3: ~40 bitsMk4/Q/Mk5: ~72 bits (vs intended 128)
🛡️ What Coldcard Users Should Do
Install the fixed firmwareGenerate a completely new seedVerify the backup and receiving addressSend a test transaction firstMove the remaining balanceKeep the previous backup until migration is confirmed
Important: Installing new firmware only fixes future seed generation. It cannot add entropy to an existing seed.
$ETH $BNB
#coldcardexploitattackerscontrol1366btc

A major security incident involving Coldcard-linked wallets has reignited the debate over self-custody after reported Bitcoin thefts exceeded 1,158 $BTC , valued at more than $75 million. Security researchers say the attack unfolded in multiple waves, prompting urgent warnings for potentially affected users.
One notable trend following the incident has been a surge in smaller Bitcoin transfers, a pattern that researchers say resembles wallet movements seen after the FTX collapse. The increase suggests many users are proactively moving funds to reduce risk rather than waiting for further developments.
According to Galaxy Research, a second wave of thefts expanded the number of affected addresses while adding to the total losses. Researchers also reported that the stolen funds remain largely untouched, allowing investigators to continue monitoring the attacker-controlled wallets for any future movement.
Security experts continue to warn that the situation may not be over. Users with potentially affected single-signature Coldcard wallets are being advised to transfer their $BTC to newly generated wallets as a precaution, while multisignature users are believed to face lower risk due to additional authorization requirements.
The incident has also revived the long-running discussion around self-custody. Some critics argue that the attack highlights the risks of managing private keys independently, while supporters maintain that self-custody remains the safest option when proper security practices and wallet management procedures are followed.
#USToCancelIranAttackSubjectToDeal #BitcoinMiningDifficultyFalls14%FromYearHigh #ColdcardExploitAttackersControl1366BTC

The crypto community is on high alert as one of the most significant hardware wallet security breaches in recent memory continues to unfold. Losses have now surpassed a staggering $88.6 million, and the on-chain data is painting a complex picture of potential attackers and evolving tactics. 🚨
According to Galaxy Research, a third wave of attacks has been detected, targeting addresses linked to Coldcard devices. This fresh assault added another 207.7 $BTC to the total loot, bringing the grand total to a massive 1,367 BTC swiped from over 4,500 addresses. The sheer scale of this heist is a stark reminder that even "cold" storage isn't always impenetrable. 🥶
Here’s the breakdown of what happened:
The First Two Waves: These were eerily similar. The attacker (or group) used shared collection addresses and had a consistent transaction structure. However, a key difference in transaction fees and "replace-by-fee" signals left room for doubt about whether it was the same person pulling the strings.The Third Wave: A Shift in Strategy 🕵️‍♂️: This wave is a complete curveball. Instead of sending stolen funds to shared addresses, they created a new target address for every single victim. They also switched to a different address format and only scanned the default derivation path. This screams that either the same hacker re-engineered their tools to make tracking harder, or a copycat attacker has entered the chat.The Victims 👥: Most of the losses are coming from wallets with balances under 1 BTC, but the big fish (larger balances) are where the real value lies. This distribution suggests the targets are primarily individual users, not massive institutions.The Stolen Hoard 💰: The attackers are sitting on a mountain of Bitcoin, valued at nearly $89 million. Interestingly, none of these coins have been moved yet. It's a waiting game to see what happens next.
This entire exploit is tied back to vulnerable Coldcard software that was released way back in March 2021. It's a classic case of an old vulnerability coming back to haunt users.
The key takeaway?
Always keep your firmware updated and be aware of even historical vulnerabilities.
A wallet is only as secure as its code and the user's diligence. 🔐
What do you think will happen to the Bitcoin price if this 88million in BTC is eventually dumped on the market? Drop your thoughts below! 👇
$ETH $COLD.US
#coldcardexploitattackerscontrol1366btc

For every 1 positive Bitcoin comment, there are only 0.58 positive ones. The fear is deeper than FTX, Mt. Gox, or COVID-19.
📊 The Data
Santiment reports Bitcoin's positive-to-negative commentary ratio has hit the lowest level since modern tracking began.
0.58 positive : 1.00 negativeFear has surpassed greed by a margin not seen during FTX, Mt. Gox, or COVID-19 Black Thursday
🔍 Why This Time Is Different
This isn't an exchange hack. It's not a bridge exploit. It's not a smart contract bug.
It's a Coldcard hardware wallet firmware flaw.
The one thing that was supposed to be impenetrable—cold storage—has a wound.
The difference:
Exchange hacks = anger at centralized entitiesBridge exploits = questions about cross-chain architectureSmart contract bugs = debates about auditingColdcard exploit = the self-custody mental model is broken
🧠 What This Means
The panic exceeds war fears from earlier this yearThe attack is on self-sovereignty, not just dollarsThe trust bar for hardware solutions just rose
⚠️ What to Watch
On-chain flows: Exchange deposits could signal a flight to custodial convenienceHardware wallet trust: Will users move away from self-custody?Regulatory impact: Could this tilt policy toward stricter hardware certification?
📉 Bottom Line
The Coldcard exploit is a crisis of confidence deeper than its $89 million financial impact. The crowd has spoken: self-custody just got less comfortable.
$BTC $ETH $BNB
#coldcardexploitattackerscontrol1366btc