Coldcard wallet breach leads to theft of million in Bitcoin from over 1,200 accounts
Recent developments in the cryptocurrency sector have raised serious concerns regarding the security of Bitcoin storage devices, following reports of a substantial fraudulent operation involving these assets. A prominent media source has highlighted that scammers are increasingly leveraging Bitcoin ATMs, or BTMs, to defraud individuals, with a specific focus on vulnerable populations, including senior citizens. Victims are often lulled into a false sense of security and tricked into depositing large amounts of money, exacerbating the issue of cryptocurrency-related scams.
Furthermore, attention has been drawn to a software vulnerability in a popular Bitcoin hardware wallet, Coldcard, which is widely used by cryptocurrency investors to store their assets offline. Security researchers from Galaxy Research discovered that this flaw enabled cybercriminals to pilfer approximately million from nearly 1,200 wallets within a mere 41 minutes. As the investigation progressed, it was revealed that two additional waves of cyberattacks may have inflated the total financial losses to nearly million.
The Coldcard wallet is designed as a safeguard against remote hacking attempts, but the recent exploits have highlighted significant weaknesses in its security framework. A coding error identified in certain versions of the Coldcard wallet may have made recovery phrases predictable, allowing sophisticated attackers to access victims’ funds without ever possessing the physical device. The company behind Coldcard, Canadian manufacturer Coinkite, has since issued a software update to protect new wallet creations but stated that existing users must generate new recovery phrases to ensure the safety of their assets.
While Coinkite has publicly acknowledged the gravity of the situation and offered its apologies, it has also urged customers to take swift action by migrating funds into newly protected wallets. Industry experts emphasize the importance of immediate responses for those who may be affected, as threats remain ongoing. The community is being encouraged to share this information with others who may own affected devices to mitigate potential losses.
Meanwhile, discussions surrounding this issue continue to grow in urgency, particularly as the cryptocurrency landscape remains marked by similar vulnerabilities and scams. With warnings raised across the industry, both consumers and providers must remain vigilant to navigate the complexities and risks associated with the growing adoption of digital currencies.
#business #technology #politics
