#coldcard
coldcard
Просмотров: 26,974
90 обсуждают
Популярные
Новые
#coldcardflawdrains594btc капитализацией на уровне $2,1 трлн. Фокус инвесторов сместился с макроэкономики на масштабный кризис доверия к методам холодного хранения активов и законодательные тупики в США Один из самых надежных #BTC -кошельков #Coldcard (производитель Coinkite) столкнулся с критической уязвимостью прошивки Ущерб: Скомпрометировано около 1200 сингл-сигнатюрных адресов, с которых злоумышленники за считанные минуты вывели 594 $BTC (порядка $38 млн).Суть проблемы: Ошибка в коде (внедренная еще в 2021 году) отключала генератор аппаратной случайности. Кошелек генерировал приватные ключи на основе предсказуемых данных — серийного номера чипа и времени. Хакеры смогли легко вычислить сид-фразы. Предполагается использование ИИ-инструментов для анализа уязвимости Кто в зоне риска: Пользователи устройств Coldcard Mk3, создавшие кошельки на прошивке версии 4.0.1 и выше. Обновление ПО не исправляет уже созданные слабые ключи — Coinkite призывает срочно переводить средства на новые адресаПаника вокруг уязвимости Coldcard и сезонный фактор (исторически август закрывался в «красной зоне» четыре года подряд) создают риск просадки к уровням $58 000 – $62 000 #BinanceSquareFamily
Y A S I R -:
❤️👍
#ColdcardFlawDrains594BTC
💀 Coldcard уязвимость слила 594 $BTC за 25 минут
Ошибка в генерации сид-фразы на Coldcard Mk3 (прошивки 4.0.0 – 5.0.3) позволила хакеру вывести ~594.5 BTC ($38 млн) с 500 кошельков за 25 минут. Проблема: устройство использовало предсказуемый программный генератор вместо аппаратного, создавая сид на основе серийного номера чипа. Модели Mk4, Q и Mk5 не затронуты.
Срочный совет: переместите средства с Mk3 на новый кошелек, созданный через dice-rolls или на незатронутой модели.
🔥 Как думаете, это подорвет доверие к аппаратным кошелькам? Пишите в комментариях!
👉 Подпишись на новости безопасности!
#Coldcard #SecurityAlert #trade 👇
💀 Coldcard уязвимость слила 594 $BTC за 25 минут
Ошибка в генерации сид-фразы на Coldcard Mk3 (прошивки 4.0.0 – 5.0.3) позволила хакеру вывести ~594.5 BTC ($38 млн) с 500 кошельков за 25 минут. Проблема: устройство использовало предсказуемый программный генератор вместо аппаратного, создавая сид на основе серийного номера чипа. Модели Mk4, Q и Mk5 не затронуты.
Срочный совет: переместите средства с Mk3 на новый кошелек, созданный через dice-rolls или на незатронутой модели.
🔥 Как думаете, это подорвет доверие к аппаратным кошелькам? Пишите в комментариях!
👉 Подпишись на новости безопасности!
#Coldcard #SecurityAlert #trade 👇
超过1000枚BTC被盗，这次被攻破的不是比特币，而是“随机数”。
这个Coldcard漏洞比普通交易所被黑更值得注意。
因为这次不是用户点了钓鱼链接，也不是私钥上传到云端。
问题出在最开始：
钱包帮你生成助记词的时候，随机得不够随机。
受影响的部分Mk3种子有效熵大约只有40 bits，本来大家以为自己拿着一把几乎不可能猜中的钥匙，结果攻击者面对的搜索空间小了几个数量级。
更麻烦的是，Mk4、Mk5和Q的旧版本也受到影响，只是攻击难度更高。
这事真正打脸的是一句币圈老话：
“Not your keys, not your coins.”
现在看来还得补一句：
你的keys，也得确认到底是怎么生成的。
短期对 $BTC 只给轻度利空，3/10。
1000 BTC不足以改变BTC供需。
但对硬件钱包行业，明显利空，8/10。
以后大户买冷钱包，不会只问“有没有联网”“有没有安全芯片”，还会问：
随机数从哪来？熵够不够？代码谁审计过？
反而多签、独立熵、不同厂商组合这些方案，我觉得会因此得到更多重视。
还有个细节挺有意思：开发者已经借助前沿AI模型快速复现了攻击。
以后安全行业最大的变化可能就是——
漏洞发现速度和漏洞利用速度，都被AI一起加速了。
如果你手里的冷钱包种子本身有问题，升级设备并不会让旧种子突然变安全。
这可能才是很多人最容易误解的地方。
$BTC #Coldcard #硬件钱包 #coldcard漏洞被盗594枚btc
这个Coldcard漏洞比普通交易所被黑更值得注意。
因为这次不是用户点了钓鱼链接，也不是私钥上传到云端。
问题出在最开始：
钱包帮你生成助记词的时候，随机得不够随机。
受影响的部分Mk3种子有效熵大约只有40 bits，本来大家以为自己拿着一把几乎不可能猜中的钥匙，结果攻击者面对的搜索空间小了几个数量级。
更麻烦的是，Mk4、Mk5和Q的旧版本也受到影响，只是攻击难度更高。
这事真正打脸的是一句币圈老话：
“Not your keys, not your coins.”
现在看来还得补一句：
你的keys，也得确认到底是怎么生成的。
短期对 $BTC 只给轻度利空，3/10。
1000 BTC不足以改变BTC供需。
但对硬件钱包行业，明显利空，8/10。
以后大户买冷钱包，不会只问“有没有联网”“有没有安全芯片”，还会问：
随机数从哪来？熵够不够？代码谁审计过？
反而多签、独立熵、不同厂商组合这些方案，我觉得会因此得到更多重视。
还有个细节挺有意思：开发者已经借助前沿AI模型快速复现了攻击。
以后安全行业最大的变化可能就是——
漏洞发现速度和漏洞利用速度，都被AI一起加速了。
如果你手里的冷钱包种子本身有问题，升级设备并不会让旧种子突然变安全。
这可能才是很多人最容易误解的地方。
$BTC #Coldcard #硬件钱包 #coldcard漏洞被盗594枚btc
忽必烈烈:
多签钱包。
如果资金不超 50 万美元，放币安就很安全。
Coldcard这次的固件漏洞，确实是硬件钱包领域少见的严重事件。
7月30日，攻击者利用种子生成过程中的随机数缺陷，在大约 40 分钟内扫走了大量 $BTC 。
初期确认金额约 594 BTC（当时约 3800万美元），来自约500个地址；Galaxy Research 后续链上分析将规模扩大到 1,082.65 BTC（约 7000万美元），涉及 1,196个地址。
问题根源在于2021年3月之后的部分固件版本，设备在生成种子时未能正确调用硬件真随机数生成器，导致熵值大幅下降（Mk3约40位），私钥可被离线重建。攻击全程无需接触实体设备。
官方已发布修复固件，但已生成的弱种子无法通过更新修复，受影响用户必须重新生成新种子并尽快迁移资金。
CZ也公开提醒：即使是硬件钱包也可能存在漏洞，风险一直存在,链上没有 100% 安全。
从影响范围和技术性质来看，这是目前已知规模最大的一次硬件钱包固件漏洞攻击，对自托管安全性的信任冲击不小。平时还是建议多关注官方安全公告，避免把所有资产集中在单一设备上。
#Bitcoin #Coldcard #硬件钱包 #链上安全
7月30日，攻击者利用种子生成过程中的随机数缺陷，在大约 40 分钟内扫走了大量 $BTC 。
初期确认金额约 594 BTC（当时约 3800万美元），来自约500个地址；Galaxy Research 后续链上分析将规模扩大到 1,082.65 BTC（约 7000万美元），涉及 1,196个地址。
问题根源在于2021年3月之后的部分固件版本，设备在生成种子时未能正确调用硬件真随机数生成器，导致熵值大幅下降（Mk3约40位），私钥可被离线重建。攻击全程无需接触实体设备。
官方已发布修复固件，但已生成的弱种子无法通过更新修复，受影响用户必须重新生成新种子并尽快迁移资金。
CZ也公开提醒：即使是硬件钱包也可能存在漏洞，风险一直存在,链上没有 100% 安全。
从影响范围和技术性质来看，这是目前已知规模最大的一次硬件钱包固件漏洞攻击，对自托管安全性的信任冲击不小。平时还是建议多关注官方安全公告，避免把所有资产集中在单一设备上。
#Bitcoin #Coldcard #硬件钱包 #链上安全
Yee-H:
硬件都被盗
🚨$70M GONE IN 41 MINUTES - no hack, no phishing, no physical access.
Nearly 1,200 COLDCARDS wallets drained. The attacker never touched a device or stole a seed phrase. The reverse-engineered predictable randomness in flawed firmware (Mk2-Mk5, Q) to recreate private keys offline. Pure math, zero contact.
This is your reminder: NEVER hold 100% of your stack in one wallet or one brand. Hardware wallets aren't infallible, diversify across devices, use multi-sig, split your cold storage. One flaw = total loss.
If you're on affected Coldcard firmware, migrate NOW.
Not your keys, not your coins. But also: not your diversification, not your safety.🔐
#bitcoin #BTC #Coldcard
Nearly 1,200 COLDCARDS wallets drained. The attacker never touched a device or stole a seed phrase. The reverse-engineered predictable randomness in flawed firmware (Mk2-Mk5, Q) to recreate private keys offline. Pure math, zero contact.
This is your reminder: NEVER hold 100% of your stack in one wallet or one brand. Hardware wallets aren't infallible, diversify across devices, use multi-sig, split your cold storage. One flaw = total loss.
If you're on affected Coldcard firmware, migrate NOW.
Not your keys, not your coins. But also: not your diversification, not your safety.🔐
#bitcoin #BTC #Coldcard
Main reason for market volatility 👍
🚨 JUST IN: #Bitcoin stolen in the Coldcard hardware wallet incident now exceeds $88 million.
K According to the latest reports, the attack has now reached approximately:
• 1,367 $BTC stolen ( $88.6M)
• 4,500+ affected Bitcoin addresses
• Researchers say this was carried out in multiple waves of exploitation.
• The stolen BTC has reportedly not been moved yet.
What happened?
The issue is not a remote hack of Coldcard devices.
Instead, it affects seed phrases generated on specific vulnerable firmware versions. If a wallet’s recovery seed was created using an affected version, the seed may have been predictable, allowing attackers to recover the wallet and drain funds.
If you own a Coldcard:
Update to the latest firmware. ✔️
Generate a brand-new seed phrase (updating alone is not enough if your current seed was created on an affected version). ✔️
Transfer your BTC to addresses derived from the new seed. ✔️
Verify whether your device and firmware version are included in the official advisory. ✔️
This incident is another reminder that hardware wallets are only as secure as the firmware and the seed generation process behind them.
Self-custody remains one of the safest ways to hold #Bitcoin but it also means staying on top of security updates.
Always verify information through official announcements before taking action.
#BTC #Coldcard #SelfCustody $BTC
🚨 JUST IN: #Bitcoin stolen in the Coldcard hardware wallet incident now exceeds $88 million.
K According to the latest reports, the attack has now reached approximately:
• 1,367 $BTC stolen ( $88.6M)
• 4,500+ affected Bitcoin addresses
• Researchers say this was carried out in multiple waves of exploitation.
• The stolen BTC has reportedly not been moved yet.
What happened?
The issue is not a remote hack of Coldcard devices.
Instead, it affects seed phrases generated on specific vulnerable firmware versions. If a wallet’s recovery seed was created using an affected version, the seed may have been predictable, allowing attackers to recover the wallet and drain funds.
If you own a Coldcard:
Update to the latest firmware. ✔️
Generate a brand-new seed phrase (updating alone is not enough if your current seed was created on an affected version). ✔️
Transfer your BTC to addresses derived from the new seed. ✔️
Verify whether your device and firmware version are included in the official advisory. ✔️
This incident is another reminder that hardware wallets are only as secure as the firmware and the seed generation process behind them.
Self-custody remains one of the safest ways to hold #Bitcoin but it also means staying on top of security updates.
Always verify information through official announcements before taking action.
#BTC #Coldcard #SelfCustody $BTC
⚡ LATEST UPDATE ⚡
**Coldcard Wallet Vulnerability Losses Approach $89 Million**
Galaxy Research has identified a third wave of unauthorized fund transfers linked to a suspected Coldcard hardware wallet vulnerability, with an additional 207.73 $BTC recently moved from compromised addresses.
The total scope observed by Galaxy has grown to approximately 1,367 $BTC (valued at roughly $88.6M) across 4,585 Bitcoin addresses.
The operational method has shifted: while the initial two exploit waves consolidated funds into a few central wallets, the latest activity distributed assets across hundreds of separate addresses, complicating tracking efforts for analysts.
Galaxy emphasized that these estimates are derived from on-chain transaction analysis and victim reports rather than direct wallet audits confirming flawed seed generation. As a result, the data remains preliminary. However, risks remain elevated as public disclosure of the vulnerability may prompt other malicious actors to target wallets created with weak seed phrases.
#Bitcoin #Coldcard #CryptoNews
$NEAR $XRP
Source: Compiled
**Coldcard Wallet Vulnerability Losses Approach $89 Million**
Galaxy Research has identified a third wave of unauthorized fund transfers linked to a suspected Coldcard hardware wallet vulnerability, with an additional 207.73 $BTC recently moved from compromised addresses.
The total scope observed by Galaxy has grown to approximately 1,367 $BTC (valued at roughly $88.6M) across 4,585 Bitcoin addresses.
The operational method has shifted: while the initial two exploit waves consolidated funds into a few central wallets, the latest activity distributed assets across hundreds of separate addresses, complicating tracking efforts for analysts.
Galaxy emphasized that these estimates are derived from on-chain transaction analysis and victim reports rather than direct wallet audits confirming flawed seed generation. As a result, the data remains preliminary. However, risks remain elevated as public disclosure of the vulnerability may prompt other malicious actors to target wallets created with weak seed phrases.
#Bitcoin #Coldcard #CryptoNews
$NEAR $XRP
Source: Compiled
Crypto Security Update
A software vulnerability in the popular Coldcard hardware wallet has reportedly led to the theft of nearly 600 BTC, worth around $70 million. According to Chainalysis, the attack primarily targeted high-value wallets, sending another reminder that even self-custody solutions are not immune to security risks.
$NVDAB
$AAPLB
The incident highlights the importance of keeping wallet firmware updated, verifying every transaction, and following strong security practices to protect digital assets.
Security remains one of the biggest priorities in crypto. Stay cautious, stay informed, and always protect your private keys.
#Bitcoin #BTC #Coldcard #ColdcardFlawDrains594BTC
A software vulnerability in the popular Coldcard hardware wallet has reportedly led to the theft of nearly 600 BTC, worth around $70 million. According to Chainalysis, the attack primarily targeted high-value wallets, sending another reminder that even self-custody solutions are not immune to security risks.
$NVDAB
$AAPLB
The incident highlights the importance of keeping wallet firmware updated, verifying every transaction, and following strong security practices to protect digital assets.
Security remains one of the biggest priorities in crypto. Stay cautious, stay informed, and always protect your private keys.
#Bitcoin #BTC #Coldcard #ColdcardFlawDrains594BTC
🚨 Coldcard Flaw Drains 594 BTC
A newly reported security flaw linked to Coldcard wallets has resulted in the loss of approximately 594 BTC, raising fresh concerns about hardware wallet security and operational risks.
⚡ THOR Edge
594 BTC reportedly drained through the exploit.
Hardware wallets remain highly secure, but improper setup, compromised firmware, or user errors can still create attack vectors.
The incident is a reminder that cold storage isn't immune to operational vulnerabilities.
🎯 THOR Verdict
This event is likely to increase scrutiny on wallet security practices rather than weaken confidence in self-custody itself. Expect the crypto community to closely monitor the investigation and any vendor response.
#bitcoin #Coldcard #IDOL #ColdcardFlawDrains594BTC #HedgeFundsAddBullishOilBets
$AKE
$EPIC
$IDOL
A newly reported security flaw linked to Coldcard wallets has resulted in the loss of approximately 594 BTC, raising fresh concerns about hardware wallet security and operational risks.
⚡ THOR Edge
594 BTC reportedly drained through the exploit.
Hardware wallets remain highly secure, but improper setup, compromised firmware, or user errors can still create attack vectors.
The incident is a reminder that cold storage isn't immune to operational vulnerabilities.
🎯 THOR Verdict
This event is likely to increase scrutiny on wallet security practices rather than weaken confidence in self-custody itself. Expect the crypto community to closely monitor the investigation and any vendor response.
#bitcoin #Coldcard #IDOL #ColdcardFlawDrains594BTC #HedgeFundsAddBullishOilBets
$AKE
$EPIC
$IDOL
🚨 تقرير: 70 مليون دولار مسروقة من محافظ Coldcard بسبب ثغرة
كشفت تقارير من Galaxy Digital عن استنزاف حوالي 70 مليون دولار من حاملي البيتكوين، متأثرين بثغرة في محافظ Coldcard. تتعلق الثغرة بخلل في توليد المفاتيح، مما أثر على عدة نماذج وإصدارات للبرامج الثابتة. أدى هذا الخلل إلى سرقة 594 بيتكوين من حوالي 500 عنوان.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ OTHER
#Coldcard #Bitcoin #Security #Exploit #Cryptocurrency
📰 المصدر: dailyhodl.com
كشفت تقارير من Galaxy Digital عن استنزاف حوالي 70 مليون دولار من حاملي البيتكوين، متأثرين بثغرة في محافظ Coldcard. تتعلق الثغرة بخلل في توليد المفاتيح، مما أثر على عدة نماذج وإصدارات للبرامج الثابتة. أدى هذا الخلل إلى سرقة 594 بيتكوين من حوالي 500 عنوان.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ OTHER
#Coldcard #Bitcoin #Security #Exploit #Cryptocurrency
📰 المصدر: dailyhodl.com
📉 Coldcard Wallet Vulnerability Linked to $70 Million Bitcoin Theft
A security flaw in the widely used Coldcard hardware wallet has reportedly led to the theft of nearly 600 $BTC BTC, worth around $70 million. According to Chainalysis, the attack appears to have targeted high-value wallets, raising fresh concerns about the reliability and security of self-custody solutions for crypto holders.
For context, $BTC BTC is currently trading around $62,717.24 on Binance, slightly down over the last 24 hours. Today’s range is $62,275.00 to $63,150.00, which helps show the market backdrop around a 600 $BTC BTC event of this size.
#ColdcardFlawDrains594BTC #BTC #Coldcard
A security flaw in the widely used Coldcard hardware wallet has reportedly led to the theft of nearly 600 $BTC BTC, worth around $70 million. According to Chainalysis, the attack appears to have targeted high-value wallets, raising fresh concerns about the reliability and security of self-custody solutions for crypto holders.
For context, $BTC BTC is currently trading around $62,717.24 on Binance, slightly down over the last 24 hours. Today’s range is $62,275.00 to $63,150.00, which helps show the market backdrop around a 600 $BTC BTC event of this size.
#ColdcardFlawDrains594BTC #BTC #Coldcard
🚨 ¡ALERTA BTC! Galaxy Detecta Nueva Oleada de Ataques a COLDCARD ⚠️
💥 Galaxy Digital reportó una tercera oleada de ataques dirigidos a billeteras frías COLDCARD. Las pérdidas totales superan ya los 88 millones de dólares 📉.
🔒 Medida urgente: Se recomienda a quienes tengan fondos en cualquier modelo fabricado después de 2020 mover sus BTC de inmediato a una dirección segura 🛡️.
📉 Mientras tanto, Bitcoin cotiza cerca de los $62,620 con leve caída.
👉 ¿Usas billeteras frías? ¡Protege tus activos y comparte esta información! 🚀
#bitcoin #Coldcard #BinanceSquare #GalaxyDigital
$BTC
$ETH
$BNB
💥 Galaxy Digital reportó una tercera oleada de ataques dirigidos a billeteras frías COLDCARD. Las pérdidas totales superan ya los 88 millones de dólares 📉.
🔒 Medida urgente: Se recomienda a quienes tengan fondos en cualquier modelo fabricado después de 2020 mover sus BTC de inmediato a una dirección segura 🛡️.
📉 Mientras tanto, Bitcoin cotiza cerca de los $62,620 con leve caída.
👉 ¿Usas billeteras frías? ¡Protege tus activos y comparte esta información! 🚀
#bitcoin #Coldcard #BinanceSquare #GalaxyDigital
$BTC
$ETH
$BNB
⚠️ اختراق Coldcard يثير تساؤلات حول أمان المحافظ الباردة
أدى اكتشاف ثغرة برمجية في محفظة Coldcard، وهي محفظة أجهزة شائعة لتخزين العملات المشفرة، إلى سرقة ما يقرب من 600 بيتكوين. يثير هذا الحادث تساؤلات حول مدى أمان الحلول الذاتية لحفظ العملات المشفرة وتحديات إدارة المفاتيح الخاصة للمستثمرين.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ OTHER
#Coldcard #Security #HardwareWallet #CryptoNews #SelfCustody
📰 المصدر: coindesk.com
أدى اكتشاف ثغرة برمجية في محفظة Coldcard، وهي محفظة أجهزة شائعة لتخزين العملات المشفرة، إلى سرقة ما يقرب من 600 بيتكوين. يثير هذا الحادث تساؤلات حول مدى أمان الحلول الذاتية لحفظ العملات المشفرة وتحديات إدارة المفاتيح الخاصة للمستثمرين.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ OTHER
#Coldcard #Security #HardwareWallet #CryptoNews #SelfCustody
📰 المصدر: coindesk.com
🚨 CZ Calls for Wallet Diversification After $70M Coldcard Exploit 🚨
Binance founder Changpeng Zhao (CZ) is urging crypto users to spread their funds across multiple wallets following a major $70 million security failure impacting Coldcard hardware devices.
CZ emphasized that even hardware wallets are not immune to bugs and vulnerabilities. To mitigate risks, he suggests a diversification strategy rather than relying on a single security solution.
Key Takeaways:
🔒 Hardware wallets can still have software flaws.
💸 Spreading funds reduces single-point-of-failure risks.
🛡️ Diversification is vital for long-term asset security.
So what is actually happened and what we need to do with it?
Do not worry, if you are not using Coldcard wallet, you are worry free.
The reported COLDCARD vulnerability stems from a critical firmware bug that disabled the hardware random number generator. This flaw allows attackers to replicate recovery seeds generated on affected devices and steal funds.
Crucially, a simple firmware update will not secure vulnerable accounts. Affected users must immediately generate an entirely new recovery seed on patched firmware and transfer their BTC to the new address.
🚨 Critical Security Steps Required
1) Update firmware to the latest patched version immediately.
2) Generate a new seed phrase directly on the secure firmware.
3) Transfer all BTC from the compromised setup to the new wallet.
4) Never reuse the old, vulnerable recovery seed phrase.
$BTC $ETH $SOL
#CryptoSecurity #Coldcard #Web3
Binance founder Changpeng Zhao (CZ) is urging crypto users to spread their funds across multiple wallets following a major $70 million security failure impacting Coldcard hardware devices.
CZ emphasized that even hardware wallets are not immune to bugs and vulnerabilities. To mitigate risks, he suggests a diversification strategy rather than relying on a single security solution.
Key Takeaways:
🔒 Hardware wallets can still have software flaws.
💸 Spreading funds reduces single-point-of-failure risks.
🛡️ Diversification is vital for long-term asset security.
So what is actually happened and what we need to do with it?
Do not worry, if you are not using Coldcard wallet, you are worry free.
The reported COLDCARD vulnerability stems from a critical firmware bug that disabled the hardware random number generator. This flaw allows attackers to replicate recovery seeds generated on affected devices and steal funds.
Crucially, a simple firmware update will not secure vulnerable accounts. Affected users must immediately generate an entirely new recovery seed on patched firmware and transfer their BTC to the new address.
🚨 Critical Security Steps Required
1) Update firmware to the latest patched version immediately.
2) Generate a new seed phrase directly on the secure firmware.
3) Transfer all BTC from the compromised setup to the new wallet.
4) Never reuse the old, vulnerable recovery seed phrase.
$BTC $ETH $SOL
#CryptoSecurity #Coldcard #Web3
🚨 Cold storage was supposed to mean untouchable.
⚠️ It didn't.
$71,000,000+ in BTC — gone. Not phished. Not hacked at the device. Drained from wallets that never left a safe.
💀 Cold. Offline. Untouched. And still emptied.
The old belief: hardware wallets are immune because attackers need physical access.
The new reality: entropy failed silently, and math did the rest.
Coldcard's 2021 firmware bug collapsed seed randomness down to a guessable range. No phishing link. No malware. No device compromise required.
The attacker never touched a single wallet.
⏱️ 1,196 addresses.
41 minutes.
Over 1,082 BTC swept.
Predictability killed more wallets than any hacker ever could.
🔓 The uncomfortable truth: a wallet is only as cold as its randomness. Offline storage protects against network attacks — it does nothing against a flawed random number generator baked in at manufacture.
The question isn't whether hardware wallets are safe. The question is whether the entropy generating the seed was ever truly random in the first place.
📌 Recommended action:
1️⃣ Update firmware immediately (Mk3: 4.2.0+, Mk4/Mk5: 5.6.0+, Q: 1.5.0Q+)
2️⃣ Generate a brand-new seed — firmware updates do NOT fix old seeds
3️⃣ Migrate all funds off the old address before touching it again
4️⃣ Where possible, add a dice-rolled passphrase for extra entropy
🔥 Rolling your own dice at setup? Those wallets survived untouched.
What does "cold storage" actually protect against, if the randomness behind it was never secure?
$BTC #Bitching #Coldcard #CryptoSecurity #DeFi
Not financial advice. DYOR.
⚠️ It didn't.
$71,000,000+ in BTC — gone. Not phished. Not hacked at the device. Drained from wallets that never left a safe.
💀 Cold. Offline. Untouched. And still emptied.
The old belief: hardware wallets are immune because attackers need physical access.
The new reality: entropy failed silently, and math did the rest.
Coldcard's 2021 firmware bug collapsed seed randomness down to a guessable range. No phishing link. No malware. No device compromise required.
The attacker never touched a single wallet.
⏱️ 1,196 addresses.
41 minutes.
Over 1,082 BTC swept.
Predictability killed more wallets than any hacker ever could.
🔓 The uncomfortable truth: a wallet is only as cold as its randomness. Offline storage protects against network attacks — it does nothing against a flawed random number generator baked in at manufacture.
The question isn't whether hardware wallets are safe. The question is whether the entropy generating the seed was ever truly random in the first place.
📌 Recommended action:
1️⃣ Update firmware immediately (Mk3: 4.2.0+, Mk4/Mk5: 5.6.0+, Q: 1.5.0Q+)
2️⃣ Generate a brand-new seed — firmware updates do NOT fix old seeds
3️⃣ Migrate all funds off the old address before touching it again
4️⃣ Where possible, add a dice-rolled passphrase for extra entropy
🔥 Rolling your own dice at setup? Those wallets survived untouched.
What does "cold storage" actually protect against, if the randomness behind it was never secure?
$BTC #Bitching #Coldcard #CryptoSecurity #DeFi
Not financial advice. DYOR.
⚠️ اكتشاف عيب في إنشاء مفاتيح أجهزة Coldcard يؤثر على 38 مليون دولار من البيتكوين
كشفت شركة Coinkite، مصنعة أجهزة Coldcard، عن عيب في نظام توليد المفاتيح في إصدارات قديمة من برامجها الثابتة، مما أدى إلى احتمال استنزاف 38 مليون دولار من البيتكوين. يبرز هذا الحادث أهمية التدابير الأمنية القوية في المحافظ الباردة وضرورة تحديث البرامج الثابتة بانتظام.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #HardwareWallet #Cybersecurity
📰 المصدر: cryptobriefing.com
كشفت شركة Coinkite، مصنعة أجهزة Coldcard، عن عيب في نظام توليد المفاتيح في إصدارات قديمة من برامجها الثابتة، مما أدى إلى احتمال استنزاف 38 مليون دولار من البيتكوين. يبرز هذا الحادث أهمية التدابير الأمنية القوية في المحافظ الباردة وضرورة تحديث البرامج الثابتة بانتظام.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #HardwareWallet #Cybersecurity
📰 المصدر: cryptobriefing.com
⚠️ اكتشاف ثغرة محتملة في أجهزة COLDCARD لحفظ البيتكوين
كشف تقرير حديث عن ثغرة في البرمجيات الثابتة (firmware) لبعض أجهزة محافظ COLDCARD الباردة، ما قد يكون قد أدى إلى توليد بذور محافظ بيتكوين قابلة للتوقع. تعود المشكلة إلى استخدام مولد برمجيات حتمية بدلاً من المعالج المخصص لتوليد العشوائية، وهو ما قد يؤثر على أمان الأصول الرقمية لبعض المستخدمين.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#COLDCARD #Bitcoin #HardwareWallet #Security #CryptoNews
📰 المصدر: slashdot.org
كشف تقرير حديث عن ثغرة في البرمجيات الثابتة (firmware) لبعض أجهزة محافظ COLDCARD الباردة، ما قد يكون قد أدى إلى توليد بذور محافظ بيتكوين قابلة للتوقع. تعود المشكلة إلى استخدام مولد برمجيات حتمية بدلاً من المعالج المخصص لتوليد العشوائية، وهو ما قد يؤثر على أمان الأصول الرقمية لبعض المستخدمين.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#COLDCARD #Bitcoin #HardwareWallet #Security #CryptoNews
📰 المصدر: slashdot.org
🚨 LATEST UPDATE 🚨
The scope of the Coldcard wallet security incident has expanded significantly. New analysis from Galaxy Research indicates that approximately 1,082.65 Bitcoin—valued at roughly $70.2 million—was moved through 1,196 different addresses during a brief 41-minute window on July 30.
This scale of loss is much higher than earlier estimates of $38 million. The attack followed a specific pattern of identical transaction fees and no change outputs. Coinkite co-founder Rodolfo Novak has acknowledged a firmware bug and released a hotfix, but warned that users with seeds generated on the vulnerable firmware should move their funds to a new seed immediately to ensure safety. 🛡️
This development highlights the critical importance of hardware wallet security and firmware integrity for self-custody. 🔐
How do you manage your seed security? 🧐
#Coldcard #Bitcoin #CryptoSecurity $BTC
$SOL $GIGGLE
The scope of the Coldcard wallet security incident has expanded significantly. New analysis from Galaxy Research indicates that approximately 1,082.65 Bitcoin—valued at roughly $70.2 million—was moved through 1,196 different addresses during a brief 41-minute window on July 30.
This scale of loss is much higher than earlier estimates of $38 million. The attack followed a specific pattern of identical transaction fees and no change outputs. Coinkite co-founder Rodolfo Novak has acknowledged a firmware bug and released a hotfix, but warned that users with seeds generated on the vulnerable firmware should move their funds to a new seed immediately to ensure safety. 🛡️
This development highlights the critical importance of hardware wallet security and firmware integrity for self-custody. 🔐
How do you manage your seed security? 🧐
#Coldcard #Bitcoin #CryptoSecurity $BTC
$SOL $GIGGLE
Ước tính tổn thất Bitcoin từ ví Coldcard tăng lên 70 triệu USD sau phân tích của Galaxy
- Galaxy Research đã xác định 1.196 địa chỉ ví mất tổng cộng 1.082,65 Bitcoin trong khoảng thời gian 41 phút.
- Sự cố liên quan đến ví phần cứng Coldcard, làm tăng ước tính tổn thất lên khoảng 70 triệu USD.
- Phân tích mở rộng phạm vi ảnh hưởng của sự cố, cho thấy mức độ nghiêm trọng hơn so với đánh giá ban đầu.
- Các nhà đầu tư cần thận trọng và kiểm tra bảo mật ví của mình.
#BinanceSquare #CryptoNews #Bitcoin #Coldcard #Security
$btc btc
vlikevn Titanbot
Nguồn: CoinTelegraph
- Galaxy Research đã xác định 1.196 địa chỉ ví mất tổng cộng 1.082,65 Bitcoin trong khoảng thời gian 41 phút.
- Sự cố liên quan đến ví phần cứng Coldcard, làm tăng ước tính tổn thất lên khoảng 70 triệu USD.
- Phân tích mở rộng phạm vi ảnh hưởng của sự cố, cho thấy mức độ nghiêm trọng hơn so với đánh giá ban đầu.
- Các nhà đầu tư cần thận trọng và kiểm tra bảo mật ví của mình.
#BinanceSquare #CryptoNews #Bitcoin #Coldcard #Security
$btc btc
vlikevn Titanbot
Nguồn: CoinTelegraph
⚠️ اكتشاف ثغرة أمنية محتملة في محافظ Coldcard لأجهزة البيتكوين
نصح تقرير حديث مستخدمي محافظ Coldcard بنقل عملات البيتكوين الخاصة بهم إلى محافظ جديدة، وذلك بعد اكتشاف ثغرة أمنية قد تكون مرتبطة بحادثة سابقة أسفرت عن خسائر كبيرة. يُعتقد أن هذه الثغرة قد تعرض مفاتيح المحافظ للخطر.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #HardwareWallet #CryptoNews
📰 المصدر: bitcoinfoundation.org
نصح تقرير حديث مستخدمي محافظ Coldcard بنقل عملات البيتكوين الخاصة بهم إلى محافظ جديدة، وذلك بعد اكتشاف ثغرة أمنية قد تكون مرتبطة بحادثة سابقة أسفرت عن خسائر كبيرة. يُعتقد أن هذه الثغرة قد تعرض مفاتيح المحافظ للخطر.
━━━━━━━━━━━━━━
📊 التأثير: 🔥 مرتفع جداً
🏷️ BITCOIN
#Coldcard #Bitcoin #Security #HardwareWallet #CryptoNews
📰 المصدر: bitcoinfoundation.org
Войдите, чтобы посмотреть больше материала