15 attackers now draining vulnerable Coldcard wallets, report

There are 15 separate attackers draining BTC from Coldcard customers’ hardware wallets, Galaxy Research concluded on Tuesday morning — and more thieves seem to be arriving by the day.

As the exploitation of last week’s newly-discovered firmware flaw continues, estimated victim losses have topped $130 million from 7,300 wallets and rising. 

Given the number of affected wallets, there are probably thousands of victims, and many long-term holders might not even be aware of their losses. Galaxy Research has heard from 73 victims as of Monday.

The fifteenth attacker surfaced overnight after an owner reported losing less than a single BTC. That report led Galaxy to identify an uncatalogued attacker who had already pulled 12 BTC out of 126 wallet addresses.

Galaxy filed the attacker’s on-chain behavior under footprint “O,” the fifteenth letter of the alphabet.

Researchers are labeling each footprint as victims come forward, and the letters are still going up.

Because the vulnerability is public knowledge, any hacker with sufficient knowledge and computational power can join the crime wave.

… Continue reading the full article at the original source below.