A hardware wallet randomness bug turned “impossible to guess” seeds into guessable ones, and $38 million is already gone.
- An attacker exploited a flaw in how some Coldcard hardware wallets generated keys to steal roughly 594 bitcoin, worth about $38 million, from around 500 single-signature wallets in under 30 minutes.
- The vulnerability, introduced in Coldcard firmware 4.0.0 in March 2021, caused devices to skip their hardware randomness generator and fall back to predictable software-based key generation seeded by nonsecret chip data.
- Coinkite has warned users who created seeds on Mk3 devices running firmware 4.0.1 or later, while stressing that Mk4, Q and Mk5 appear unaffected so far, and the theft has had little visible impact on bitcoin’s market price.
- 1 Payments firm OpenPayd targets year-end Nasdaq listing to fund U.S. expansion and acquisitions 8 hours ago
- 2 Crypto job postings triple to over 1,200 in September, but applications fall 8 hours ago
- 3 Cathie Wood says smart investors need to start watching where AI agents spend money 9 hours ago
- 4 Crypto's Sisyphean struggle 11 hours ago
- 5 BlackRock offers a glimpse of how tokenization may change your investment portfolio 11 hours ago
- 6 Bank group sues U.S. regulator over granting crypto trust charters 1 day ago
- 7 BNY in talks with Kraken parent Payward over infrastructure partnership 1 day ago
- 8 Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98% 1 day ago
- 9 Trump’s potential AI czar, Jay Clayton, helped pioneer the SEC’s crypto crackdown 1 day ago
- 10 America at a crossroads: Commissioner Peirce’s parting challenge 1 day ago
The Definitive Stablecoin Landscape Series: Asia Pacific
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Why it matters :
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98%
Live updates: Bitcoin reverses big early gains following soft U.S. jobs data
Tether's USDT is 'coming home' to Bitcoin after more than a decade
Original sourceCoinDesk
The original source remains the canonical version for attribution, rights, and later updates.
Read original ↗Disclaimer: This article is for information only and does not constitute investment advice. Digital assets involve substantial risk.
← Back to latest