importantSYS.SOURCE: The Hacker News• 2026-08-01T22:47:22+05:30

Coldcard Hardware Wallet Firmware Vulnerability Enables $70M Bitcoin Theft in 41 Minutes

#vulnerability #hardware #cryptocurrency #firmware #security

A firmware vulnerability in Coldcard hardware wallets allowed an attacker to steal $70 million in Bitcoin by exploiting a deterministic pseudorandom number generator (PRNG) flaw. The flaw, stemming from a 2021 configuration error, reduced entropy in seed generation, enabling offline seed reconstruction and address drainage.

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.

A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

Read original article

*** END OF TRANSMISSION ***

> FREE WHATSAPP MCP WITH WEB UI FOR AI AGENT INTEGRATION > NVIDIA’S LES KARPAS DISCUSSES ROBOTICS CHALLENGES AND AI BREAKTHROUGH POTENTIAL AT TECHCRUNCH DISRUPT 2026 > GOOGLE CONFIRMS ZERO-DAY EXPLOITATION IN PIXEL PHONES LEADING TO UNAUTHORIZED ACCESS > AMAZON INCREASES U.S. CORE OPERATIONS WORKER PAY BY $1/HOUR > PS5 LINUX PROJECT LEAD RESIGNS OVER OPEN-SOURCE COMMUNITY MISMANAGEMENT > ETHICAL AND TECHNICAL CONCERNS SURROUNDING AI CONSCIOUSNESS AND MODEL WELFARE > THREADS INTRODUCES PODCAST PROMOTION TOOLS TO ENHANCE CREATOR ENGAGEMENT AND AUDIENCE REACH > TECHCRUNCH DISRUPT 2026 STARTUP BATTLEFIELD 200 JUDGES ANNOUNCED > EXHIBIT OPPORTUNITY AT TECHCRUNCH DISRUPT 2026: ACCESS VCS AND HIGH-VALUE LEADS > DREAM-RSI: A FRAMEWORK FOR SCALABLE RECURSIVE SELF-IMPROVEMENT IN AI EXPLORATION> FREE WHATSAPP MCP WITH WEB UI FOR AI AGENT INTEGRATION > NVIDIA’S LES KARPAS DISCUSSES ROBOTICS CHALLENGES AND AI BREAKTHROUGH POTENTIAL AT TECHCRUNCH DISRUPT 2026 > GOOGLE CONFIRMS ZERO-DAY EXPLOITATION IN PIXEL PHONES LEADING TO UNAUTHORIZED ACCESS > AMAZON INCREASES U.S. CORE OPERATIONS WORKER PAY BY $1/HOUR > PS5 LINUX PROJECT LEAD RESIGNS OVER OPEN-SOURCE COMMUNITY MISMANAGEMENT > ETHICAL AND TECHNICAL CONCERNS SURROUNDING AI CONSCIOUSNESS AND MODEL WELFARE > THREADS INTRODUCES PODCAST PROMOTION TOOLS TO ENHANCE CREATOR ENGAGEMENT AND AUDIENCE REACH > TECHCRUNCH DISRUPT 2026 STARTUP BATTLEFIELD 200 JUDGES ANNOUNCED > EXHIBIT OPPORTUNITY AT TECHCRUNCH DISRUPT 2026: ACCESS VCS AND HIGH-VALUE LEADS > DREAM-RSI: A FRAMEWORK FOR SCALABLE RECURSIVE SELF-IMPROVEMENT IN AI EXPLORATION