Coldcard, a bitcoin-only hardware wallet, has recently fallen victim to a data breach resulting in hackers stealing over $100 million US worth of bitcoin, as reported by blockchain intelligence firm Galaxy Research. This breach has raised concerns among users about the security of their cryptocurrency holdings. Coldcard, developed by Coinkite in Toronto, functions as a hardware wallet that does not store bitcoin but enhances security by storing seed phrases offline within the physical device.
The seed phrases serve as a master key, enabling users to authorize and sign transactions. Despite being widely praised as a secure cold storage solution for bitcoin, Coldcard faced a major software bug that allowed hackers to reconstruct wallet seed phrases remotely. This vulnerability led to multiple attack waves resulting in the theft of 1,596 bitcoin from approximately 7,300 addresses, with the potential for further losses if additional attacks are confirmed.
Coinkite has issued firmware updates to address the security flaw and advised users to move their funds immediately. The company acknowledged the software vulnerability originating from March 2021 due to a flawed random number generator. While the investigation continues, experts stress the importance of taking proactive measures to protect cryptocurrency holdings, such as installing updated firmware and refraining from generating new seeds on vulnerable devices until the issue is resolved.
Galaxy Research emphasized the need for affected users to transfer their funds to safer addresses and cautioned against disposing of compromised devices in case of fund recovery efforts. The ongoing situation underscores the risks associated with storing cryptocurrency offline and highlights the importance of remaining vigilant against potential cyber threats.
Law enforcement agencies, exchanges, and cyber-investigation groups have been informed about the attack details to aid in tracking down the hackers. The incident serves as a stark reminder of the evolving cybersecurity landscape and the necessity for constant vigilance to safeguard digital assets.
Affected Coldcard users are advised to take immediate action to mitigate risks and ensure the security of their funds. As the investigation progresses, users are urged to stay informed and follow recommended security practices to protect their cryptocurrency holdings effectively.