negativeSYS.SOURCE: The Hacker News• 2026-08-01T22:47:22+05:30

Coldcard Hardware Wallet Vulnerability Exploited in $70 Million Bitcoin Heist

#vulnerability #cryptocurrency #hardware

A firmware vulnerability in Coldcard hardware wallets allowed an attacker to steal $70 million in Bitcoin by exploiting a deterministic PRNG flaw. The flaw, stemming from a misconfigured RNG during seed generation, enabled offline seed reconstruction and address drainage across 1,196 wallets.

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.

A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

Read original article

*** END OF TRANSMISSION ***

> SENIOR DEMAND GENERATION MANAGER POSITION AT GREAT QUESTION (Y COMBINATOR STARTUP)> MESHDIFF: BROWSER-BASED 3D STL MODEL COMPARISON TOOL > WIKIMEDIA FOUNDATION DENIES UNION RECOGNITION, ENGAGES UNION-BUSTING LAW FIRM > IMPACT OF GENERATIVE AI ON BOOK MARKET DYNAMICS > REEVALUATING THE INDUSTRIAL REVOLUTION AS A PRECEDENT FOR MODERN ECONOMIC GROWTH ACCELERATION > THE ARS NOTORIA: MEDIEVAL MAGICAL MANUSCRIPT AND THE QUEST FOR RAPID KNOWLEDGE ACQUISITION > SYNCULAR: AN OFFLINE-FIRST SQL SYNCHRONIZATION LIBRARY USING TYPESCRIPT AND RUST > BOR V0.8.0 RELEASE: ENHANCED POLICY MANAGEMENT FOR LINUX DESKTOPS WITH THUNDERBIRD, EDGE, AND FIREWALLD SUPPORT > CYBER: A HIGH-PERFORMANCE CONCURRENT SCRIPTING LANGUAGE > AI-DRIVEN MATHEMATICS: IMPLICATIONS OF AUTONOMOUS THEOREM PROVING WITHOUT HUMAN INVOLVEMENT> SENIOR DEMAND GENERATION MANAGER POSITION AT GREAT QUESTION (Y COMBINATOR STARTUP)> MESHDIFF: BROWSER-BASED 3D STL MODEL COMPARISON TOOL > WIKIMEDIA FOUNDATION DENIES UNION RECOGNITION, ENGAGES UNION-BUSTING LAW FIRM > IMPACT OF GENERATIVE AI ON BOOK MARKET DYNAMICS > REEVALUATING THE INDUSTRIAL REVOLUTION AS A PRECEDENT FOR MODERN ECONOMIC GROWTH ACCELERATION > THE ARS NOTORIA: MEDIEVAL MAGICAL MANUSCRIPT AND THE QUEST FOR RAPID KNOWLEDGE ACQUISITION > SYNCULAR: AN OFFLINE-FIRST SQL SYNCHRONIZATION LIBRARY USING TYPESCRIPT AND RUST > BOR V0.8.0 RELEASE: ENHANCED POLICY MANAGEMENT FOR LINUX DESKTOPS WITH THUNDERBIRD, EDGE, AND FIREWALLD SUPPORT > CYBER: A HIGH-PERFORMANCE CONCURRENT SCRIPTING LANGUAGE > AI-DRIVEN MATHEMATICS: IMPLICATIONS OF AUTONOMOUS THEOREM PROVING WITHOUT HUMAN INVOLVEMENT