#coldcard
coldcard
160,550 views
518 Discussing
Hot
Latest
·
--
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontario’s Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
Came across this in The Globe and Mail: Toronto hardware wallet maker Coinkite and its co-founder are facing a proposed class action in Ontario’s Superior Court. The lawsuit alleges that a Coldcard firmware vulnerability made recovery phrases guessable, resulting in users losing more than $140 million in Bitcoin.
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
The key details: The lawsuit was filed on September 11 and names CEO Rodolfo Novak and co-founder Peter Gray as defendants. It alleges that 2021 firmware connected the random number generator to a weaker software PRNG, a problem engineer James O'Beirne had reported in May 2025. The alleged attacks occurred in multiple waves starting on 2026/7/30, with losses estimated in the lawsuit at more than $140 million. Plaintiff Amir Naderi says he personally lost about $80,000. The company declined to comment on the specifics of the lawsuit, saying it would publish a full postmortem within days; the CEO had previously publicly acknowledged a firmware bug. The lawsuit has not yet been certified, and its allegations remain unproven.
Cold wallets aren’t absolutely safe either—if the seed-generation process fails, being offline won’t protect you.
#$BTC #Coldcard #Hardware wallet
4
·
--
🚨 $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys 🛑
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
🚨 $BTC USERS ALERT: Coldcard Flaw Could Expose Your Keys 🛑
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
The recent Ontario class‑action filing reveals that Coldcard’s firmware has been running a predictable PRNG since March 2021, turning what should be a one‑time seed into a replayable script. 🦈 Smart money already sniffing the leak is shifting to hardware that guarantees true entropy.
For Bitcoin holders, the breach translates into a silent liquidity sweep—if a malicious actor ever extracts the mnemonic, they can front‑run your stash. 📊 Keep an eye on any unusual outbound transactions and consider migrating to a wallet with a hardware‑based RNG. 💡
💬 Are you planning a wallet migration this week or waiting for a patch? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #BTC #Coldcard #Security #Crypto
🔥 💎
9
Bought a hardware wallet for peace of mind, only to find out its seed phrase was “pseudorandom.” Coinkite’s Coldcard has been exposed: a March 2021 firmware update secretly disabled the chip’s true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontario’s Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is gone—move everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
Bought a hardware wallet for peace of mind, only to find out its seed phrase was “pseudorandom.” Coinkite’s Coldcard has been exposed: a March 2021 firmware update secretly disabled the chip’s true random number generator, leaving seed phrases with only 40 bits of entropy, when the BIP-39 standard requires 128 bits. It was like printing the front-door passcode in the product manual. On July 30, attackers drained 594 $BTC (about $38 million) in 25 minutes, hitting more than 500 wallets. Total losses exceeded $140 million, with over 5,200 victims. On September 11, Ontario’s Superior Court officially accepted a class-action lawsuit. The plaintiffs say the founding team knew as early as May 2025; the company denies this, saying it only found out that same day and has since released a patch. The patch is out, but not a single stolen coin has been returned. What are you really buying with a cold wallet: true security or peace of mind? Vote in the comments: A. Keep using hardware wallets after the fix; B. Trust is gone—move everything back to an exchange.
$ETH $SOL
#Coldcard #HardwareWallet
$ETH $SOL
#Coldcard #HardwareWallet
107
·
--
【Market Update】The most ironic part isn’t that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTC—worth about $38 million—in just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware won’t protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturer’s word?
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
【Market Update】The most ironic part isn’t that the vulnerability went undiscovered for five years: the lawsuit alleges that an engineer warned Coinkite back in May 2025. By July 30 this year, attackers had stolen 594 BTC—worth about $38 million—in just 25 minutes. Total losses are alleged to exceed $140 million. A class-action lawsuit has reached an Ontario court, covering the entire product line from Mk2 through Q. Even more unsettling, installing new firmware won’t protect old recovery phrases that have already been generated. Unless you replace them with new ones, the door remains open. Would you still bet the security of your hardware wallet entirely on the manufacturer’s word?
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
$BTC $ETH $SOL
#比特币 #硬件钱包 #Coldcard
（Source: Bitcoin.com News）
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risk; please exercise caution when entering the market.
9
·
--
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
I came across a statement of claim made public by the Ontario Superior Court: Coldcard maker Coinkite and co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit.
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
The claim alleges that firmware dating back to March 2021 switched to MicroPython’s Yasmarang pseudorandom number generator due to a build error, making seed phrases reproducible. Attackers allegedly exploited the vulnerability to steal cryptocurrency starting July 30, 2026, transferring about 594 BTC in roughly 25 minutes in the first wave. Total losses have exceeded $140 million. It also alleges that the two founders knew about the flaw by May 2025 at the latest. The plaintiff is seeking class certification and damages under Ontario’s Consumer Protection Act, among other claims.
$BTC #Coldcard #HardwareWallet
52
·
--
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase FlawA hardware wallet has landed in Ontario Superior Court—the plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
Cold Wallet Maker Sued: Class Action Alleges Seed Phrase Flaw
A hardware wallet has landed in Ontario Superior Court—the plaintiff is seeking a class action, and the court has not ruled.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
Ontario Superior Court statement of claim (Court file no. CV-26-00018158, electronically issued around 2026-09-11): Plaintiff Amir Reza Naderi, on behalf of a proposed class, is suing Coldcard maker Coinkite Inc. and co-founders Rodolfo Novak and Peter D. Gray. The statement of claim alleges that, after a firmware update in March 2021, seed phrase generation relied on MicroPython’s non-cryptographic Yasmarang PRNG, making it possible to reproduce the phrases offline; that the vulnerability was exploited starting 2026-07-30, with approximately 594 $BTC transferred in the first roughly 25 minutes (estimated in the claim at about $38 million), and alleged cumulative losses exceeding $140 million thereafter; and that the plaintiff himself suffered a loss of about 1.2294 $BTC on August 6. It also alleges that the defendants had been notified of a potential vulnerability by at least May 2025 but failed to provide adequate warnings. The relief sought includes remedies under consumer protection and sale of goods laws, as well as for negligence and breach of contract—these are all allegations by the plaintiff and have not been adjudicated.
145
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
31
·
--
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
127
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
131
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
1
193
·
--
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
27
·
--
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
82
·
--
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
127
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard
#CryptoSecurity #Coldcard
64
·
--
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full ChainThe biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full Chain
The biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
101
🚨 Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
🚨 Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
10
🚨 Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
🚨 Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
11
🚨 Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
🚨 Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
1
25
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number
Trending Topics
1
#$1.5BInLeveragedCryptoBetsLiquidated
8,180 views
125 Discussing
2
#KOSPIFalls3.53%BackBelow6000
22,521 views
557 Discussing
3
#AmazonSharesFallAbout7%InPremarketTrading
5,659 views
190 Discussing
4
#USMidtermElections
153,494 views
1,815 Discussing
5
#StrategySTRCReaches$99.95ForFirstTimeIn165Days
3,532 views
78 Discussing
6
#BinanceWillListPredictPREDICT
47,780 views
939 Discussing
7
#SwitzerlandFirstSpotBitcoinETFExpectedToTradeInNovember
1,743 views
86 Discussing
8
#StrategyReports$21BQ3OperatingProfit
1,850 views
44 Discussing
9
#TwoAddressesHoldingAbout1.28BUSDTFrozen
29,325 views
573 Discussing
10
#FirstDigitalBlacklistsAttackerAddressHoldingAbout3.4MFDUSD
877 views
19 Discussing