importantSYS.SOURCE: The Hacker News• 2026-08-01T22:47:22+05:30

Coldcard Hardware Wallet Firmware Vulnerability Enables $70 Million Bitcoin Theft

#hardware #vulnerability #cryptocurrency

A firmware flaw in Coldcard hardware wallets allowed an attacker to steal $70 million in Bitcoin by exploiting weak random number generation. The vulnerability, stemming from a PRNG misconfiguration, affected multiple device models, prompting emergency firmware updates and warnings for users to regenerate seeds.

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.

A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

Read original article

*** END OF TRANSMISSION ***

> SSH CREDENTIAL HARVESTING ANALYSIS FROM HONEYPOT NETWORK DATA > SSH CREDENTIAL HARVESTING ANALYSIS VIA HONEYPOT NETWORK INSIGHTS > NIXOS-DGX-SPARK: INTEGRATING NIX AND NIXOS WITH DGX SPARK HARDWARE > NIXOS-DGX-SPARK: INTEGRATING NIX AND NIXOS WITH DGX SPARK HARDWARE > MALAYSIA ORDERS CLOSURE OF BALAJI SRINIVASAN'S NETWORK SCHOOL STARTUP COMMUNITY > MALAYSIA ORDERS SHUTDOWN OF BALAJI SRINIVASAN'S NETWORK SCHOOL AMID LICENSING ISSUES > ARCH LINUX AUR PACKAGE ADOPTION AND PUSHES TEMPORARILY SUSPENDED DUE TO SECURITY CONCERNS > ARCH LINUX AUR PUSHES TEMPORARILY SUSPENDED AMID MALICIOUS ACTIVITY > LINUX DESKTOP MARKET SHARE EXCEEDS 10% IN NORTH AMERICA, PER STATCOUNTER > KAKEHASHI: EXPERIMENTAL USERSPACE SOLUTION FOR RUNNING MACOS BINARIES ON LINUX ARM64> SSH CREDENTIAL HARVESTING ANALYSIS FROM HONEYPOT NETWORK DATA > SSH CREDENTIAL HARVESTING ANALYSIS VIA HONEYPOT NETWORK INSIGHTS > NIXOS-DGX-SPARK: INTEGRATING NIX AND NIXOS WITH DGX SPARK HARDWARE > NIXOS-DGX-SPARK: INTEGRATING NIX AND NIXOS WITH DGX SPARK HARDWARE > MALAYSIA ORDERS CLOSURE OF BALAJI SRINIVASAN'S NETWORK SCHOOL STARTUP COMMUNITY > MALAYSIA ORDERS SHUTDOWN OF BALAJI SRINIVASAN'S NETWORK SCHOOL AMID LICENSING ISSUES > ARCH LINUX AUR PACKAGE ADOPTION AND PUSHES TEMPORARILY SUSPENDED DUE TO SECURITY CONCERNS > ARCH LINUX AUR PUSHES TEMPORARILY SUSPENDED AMID MALICIOUS ACTIVITY > LINUX DESKTOP MARKET SHARE EXCEEDS 10% IN NORTH AMERICA, PER STATCOUNTER > KAKEHASHI: EXPERIMENTAL USERSPACE SOLUTION FOR RUNNING MACOS BINARIES ON LINUX ARM64