Published Jul 31, 2026, 8:43 AM ET · Updated 3 months ago · 1 source

ALERT: 594 $BTC ($38M) has been drained from 500 @COLDCARDwallet hardware wallets in a 25-minute window, exploiting a flaw in how the device generated private keys. The vulnerability traces to firmware 4.0.0 shipped in March 2021.

CoinDesk

Original Report

ALERT: 594 $BTC ($38M) has been drained from 500 hardware wallets in a 25-minute window, exploiting a flaw in how the device generated private keys. The vulnerability traces to firmware 4.0.0 shipped in March 2021.