importantSYS.SOURCE: The Hacker News• 2026-08-01T22:47:22+05:30

Coldcard Hardware Wallet Vulnerability Enables $70M Bitcoin Theft via Firmware Flaw

#hardware security #firmware vulnerability #cryptocurrency

A firmware vulnerability in Coldcard hardware wallets allowed an attacker to steal $70 million worth of Bitcoin by exploiting a pseudorandom number generator (PRNG) flaw. The flaw, stemming from improper seed generation, enabled recovery of private keys through deterministic outputs, prompting Coinkite to release emergency firmware and advise users to regenerate seeds.

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.

A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

Read original article

*** END OF TRANSMISSION ***

> SENIOR DEMAND GENERATION MANAGER POSITION AT GREAT QUESTION (Y COMBINATOR STARTUP)> MESHDIFF: BROWSER-BASED 3D STL MODEL COMPARISON TOOL > WIKIMEDIA FOUNDATION DENIES UNION RECOGNITION, ENGAGES UNION-BUSTING LAW FIRM > IMPACT OF GENERATIVE AI ON BOOK MARKET DYNAMICS > REEVALUATING THE INDUSTRIAL REVOLUTION AS A PRECEDENT FOR MODERN ECONOMIC GROWTH ACCELERATION > THE ARS NOTORIA: MEDIEVAL MAGICAL MANUSCRIPT AND THE QUEST FOR RAPID KNOWLEDGE ACQUISITION > SYNCULAR: AN OFFLINE-FIRST SQL SYNCHRONIZATION LIBRARY USING TYPESCRIPT AND RUST > BOR V0.8.0 RELEASE: ENHANCED POLICY MANAGEMENT FOR LINUX DESKTOPS WITH THUNDERBIRD, EDGE, AND FIREWALLD SUPPORT > CYBER: A HIGH-PERFORMANCE CONCURRENT SCRIPTING LANGUAGE > AI-DRIVEN MATHEMATICS: IMPLICATIONS OF AUTONOMOUS THEOREM PROVING WITHOUT HUMAN INVOLVEMENT> SENIOR DEMAND GENERATION MANAGER POSITION AT GREAT QUESTION (Y COMBINATOR STARTUP)> MESHDIFF: BROWSER-BASED 3D STL MODEL COMPARISON TOOL > WIKIMEDIA FOUNDATION DENIES UNION RECOGNITION, ENGAGES UNION-BUSTING LAW FIRM > IMPACT OF GENERATIVE AI ON BOOK MARKET DYNAMICS > REEVALUATING THE INDUSTRIAL REVOLUTION AS A PRECEDENT FOR MODERN ECONOMIC GROWTH ACCELERATION > THE ARS NOTORIA: MEDIEVAL MAGICAL MANUSCRIPT AND THE QUEST FOR RAPID KNOWLEDGE ACQUISITION > SYNCULAR: AN OFFLINE-FIRST SQL SYNCHRONIZATION LIBRARY USING TYPESCRIPT AND RUST > BOR V0.8.0 RELEASE: ENHANCED POLICY MANAGEMENT FOR LINUX DESKTOPS WITH THUNDERBIRD, EDGE, AND FIREWALLD SUPPORT > CYBER: A HIGH-PERFORMANCE CONCURRENT SCRIPTING LANGUAGE > AI-DRIVEN MATHEMATICS: IMPLICATIONS OF AUTONOMOUS THEOREM PROVING WITHOUT HUMAN INVOLVEMENT