Bitcoin Wallet Flaw Drains 594 BTC From Coldcard Wallets in 25 Minutes
TLDR
- An attacker drained about 594 BTC from roughly 500 Coldcard-linked wallets in 25 minutes.
- Around 562 BTC was consolidated into one address after the wallet sweep.
- The flaw affected seeds generated on Coldcard Mk3 firmware versions 4.0.1 to 5.0.3.
- Coinkite said Mk4, Mk5, and Q devices are not affected based on early analysis.
- Block traced the issue to weak randomness tied to serial numbers and clock registers.
A major Bitcoin wallet flaw has drained about 594 BTC, worth nearly $38 million, from roughly 500 older single-signature wallets linked to Coldcard key-generation weakness.
Bitcoin Wallet Flaw Hits Older Coldcard Seeds
The attack unfolded between 01:31 and 01:56 UTC on Friday. During that 25-minute window, an attacker moved 1,324 chunks of Bitcoin across about 500 transactions.
The funds were taken within a three-block window, showing a fast and coordinated sweep. Around 562 BTC was later consolidated into one address that had not moved at the time of reporting.
More than $38M has been stolen due to a Coldcard wallet vulnerability.⚠️
… Continue reading the full article at the original source below.
This content is automatically aggregated. Full credit goes to the original publisher (coincentral.com).
