Coldcard PRNG Flaw Lets Attackers Reconstruct Private Keys: 1,367 BTC Drained
A crypto hack targeting a firmware flaw in the Coldcard Bitcoin hardware wallet has drained at least 1,367 BTC, worth approximately $86M at current prices, from more than 4,500 cold storage addresses across three waves of attacks. The exploit never required physical access to a single device; it rebuilt private keys from scratch using mathematics.
Galaxy Research: Three Suspected Attacks on Coldcard-Generated Addresses Drain 1,367 BTC
Galaxy Research said its Bitcoin on-chain analysis identified three suspected attack waves targeting addresses generated by Coldcard, involving 4,585 addresses and a total of 1,367.05 BTCโฆ pic.twitter.com/JdSz4W1TIk
- Wu Blockchain (@WuBlockchain) August 1, 2026
The central problem: Bitcoin self-custody promises that a key stored offline is unreachable. This attack proved that an unreachable key can still be unguessable, or not.
This story has unfolded as BTC USD sits at around $62,250, down -1.4% on this Monday morning as rumors swirl of Saylor lining up to dump more Bitcoin and the CLARITY Act deadline nearing, with no breakthrough looking likely.
โฆ Continue reading the full article at the original source below.
