The cold wallet maker said the flaw behind roughly $114 million in losses remains live, with specific models and firmware still exposed.

  • The developers of the Coldcard bitcoin wallet urged users to move their funds amid an exploit that has already drained as much as $114 million from self-custodied wallets.
  • The vulnerability affects certain Mk3 devices set up on firmware 4.0.1 or later and Mk4, Mk5 and Q devices on older firmware. Wallets created using the dice-roll option are considered safe.
  • The flaw, dormant in firmware since 2021, allows attackers to guess poorly randomized seed keys and drain funds, even as bitcoin’s price has remained near $63,800 despite the warning.

The warning is not precautionary. CoinDesk reported Monday that a possible fourth wave of sweeps ran throughout the day, taking roughly 449 BTC from 709 addresses on Galaxy Research's revised count and lifting cumulative losses from about $89 million to as much as $114 million.

The flaw traces to firmware that has sat dormant since 2021 , in cases where a single key controls the funds with no second approval required.

  1. 1 Payments firm OpenPayd targets year-end Nasdaq listing to fund U.S. expansion and acquisitions 11 hours ago
  2. 2 Crypto job postings triple to over 1,200 in September, but applications fall 11 hours ago
  3. 3 Cathie Wood says smart investors need to start watching where AI agents spend money 12 hours ago
  4. 4 Crypto's Sisyphean struggle 14 hours ago
  5. 5 BlackRock offers a glimpse of how tokenization may change your investment portfolio 14 hours ago
  6. 6 Bank group sues U.S. regulator over granting crypto trust charters 1 day ago
  7. 7 BNY in talks with Kraken parent Payward over infrastructure partnership 1 day ago
  8. 8 Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98% 1 day ago
  9. 9 Trump’s potential AI czar, Jay Clayton, helped pioneer the SEC’s crypto crackdown 1 day ago
  10. 10 America at a crossroads: Commissioner Peirce’s parting challenge 1 day ago

The Definitive Stablecoin Landscape Series: Asia Pacific

As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.

Why it matters :

As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.

Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98%

Live updates: Bitcoin reverses big early gains following soft U.S. jobs data

Tether's USDT is 'coming home' to Bitcoin after more than a decade

Payments firm OpenPayd targets year-end Nasdaq listing to fund U.S. expansion and acquisitions

Crypto job postings triple to over 1,200 in September, but applications fall

Cathie Wood says smart investors need to start watching where AI agents spend money

Original sourceCoinDesk

The original source remains the canonical version for attribution, rights, and later updates.

Read original ↗

Disclaimer: This article is for information only and does not constitute investment advice. Digital assets involve substantial risk.

← Back to latest