Coldcard hacker’s BTC wallet flooded with on-chain messages

A wallet holding about $36 million worth of BTC stolen from Coldcard devices has taken in 23 deposits since the theft while becoming a collection box for an assortment of heartfelt and bizarre notes.

Indeed, 14 of these deposits carried written messages, including one that asked the thief for five BTC to spend on cocaine and prostitutes.

Coinkite, the Toronto company behind Coldcard, disclosed a catastrophic bug in its hardware wallets last week. For over five years, its firmware had been generating seed phrases with roughly 40 bits of entropy instead of its intended 128.

Hackers subsequently set about using computational brute-force to crack customers’ private keys and sweep their BTC.

On-chain thefts now top $100 million, via 1,596 BTC stolen from ~7300 addresses, according to Galaxy Research, graffiti has moved in to communicate with the anonymous adversary.

Meanwhile, 23 depositors have delivered 81,527 satoshis worth about $52 after mining fees, to the hacker. Their senders paid another 9,706 satoshis, roughly $6, in fees.

… Continue reading the full article at the original source below.