#coldcard
coldcard
160,230 views
509 Discussing
Hot
Latest
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
📢 Which hardware wallet to buy after the Ledger and Coldcard incidents (October 2026)
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
Just two incidents in 2026—a breach involving an unofficial Ledger reseller and a Coldcard firmware flaw—resulted in more than US$200 million in cryptocurrency being stolen, according to Galaxy Research. In most of the cases this year, the wallet’s chip wasn’t compromised: the problem was where…
#Coldcard #Ledger #GalaxyDigital #crypto #billetera $BTC $WBTC
22
·
--
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
Coldcard users: ignore the deleted “critical firmware” warning from its official X account.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
#Coldcard says the link was phishing and coldcard.com is its only official site; no new firmware flaw or losses are confirmed.
The account incident is still under investigation.
113
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
The phishing link posted from Coldcard's official X account today used a domain registered 7 days earlier.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
We checked the registry record for coldcardwallet.io. It was registered on Oct 4 at 04:39 UTC+8 through the registrar NiceNIC. Users first flagged the post at 13:02 UTC+8 on Oct 11, so the domain was in someone's hands at least a week before the post went out.
The link went to migrate.coldcardwallet.io. Coldcard's real advice for its July seed bug sits at coldcard.com/security/migrate. The fake copied the word owners were already expecting, and its domain matches the X handle, COLDCARDwallet, instead of the real website.
The bait was picked for this crowd. That firmware bug weakened seed generation, and attackers took at least $100M in Bitcoin from 7,300 wallets, per Galaxy Digital. Owners with affected seeds really have been told to move funds to a new one, so "migrate now" from the official account looked believable.
Coldcard deleted the post and says it found no matching login or session on its side. It has asked X to look into it.
A real Coldcard migration happens on the device. A website asking for your seed words is the attack.
$BTC
#Coldcard #Bitcoin
NFA. DYOR.
1
184
·
--
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
A sneaky link slipped onto Coldcard’s X page, reminding us that even security‑focused firms can be targeted.
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
🧠 In plain words
Think of a phishing link like a fake doorbell that rings your phone; it looks legitimate, but pressing it can let strangers inside. Coldcard warned followers to ignore the rogue link and promised to update once they verify details.
✅ What it means for you
• Always double‑check URLs before clicking, even on trusted accounts.
• Keep your hardware wallet firmware up to date to benefit from the latest safeguards.
• Follow official channels for alerts and never share seed phrases or private keys.
Stay vigilant and protect your crypto assets.
#CryptoSafety #PhishingAlert #Coldcard
11
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
🚨 BITCOIN ALERT: AN OFFICIAL ACCOUNT SHARED A FRAUDULENT LINK
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
On October 11, COLDCARD, a manufacturer of hardware wallets for $BTC, reported that a fraudulent link had been shared from its official X account.
⚠️ WHAT HAPPENED?
🔸 The message posed as an urgent security warning.
🔸 It directed users to a fake page for a supposed funds migration.
🔸 COLDCARD removed the post and is investigating how it appeared.
🚨 WERE THE WALLETS HACKED?
There is no confirmed evidence that the devices were compromised or that the link resulted in financial losses.
🛡️ HOW TO PROTECT YOUR FUNDS
1️⃣ Don’t click migration links shared in suspicious posts.
2️⃣ Never enter your recovery phrase (the words that give access to your funds) on a website.
3️⃣ Verify alerts by going directly to the manufacturer’s website yourself.
4️⃣ If you revealed your phrase, consider it compromised and move your funds to a new, secure wallet.
📌 OUR TAKE
Following our coverage of Ledger, another, different risk has emerged: phishing (deception aimed at stealing data or funds) through seemingly official channels.
A legitimate account doesn’t guarantee that every link it posts is safe.
🔎 WHAT WE’RE WATCHING
🔴 Risk: confirmed victims or new fraudulent posts.
🟡 Monitoring: investigation ongoing.
🟢 Improvement: source clarified and security measures strengthened.
⚠️ Don’t confuse a fraudulent link with a confirmed device hack.
📌 ALERT / SECURITY
#bitcoin #BTC #Coldcard #Security
118
·
--
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Urgent investigation: Coldcard investigates the appearance of a phishing link on its account on X
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
Coldcard, a specialist in cold-storage cryptocurrency wallets, announced that it is officially investigating how a phishing link appeared on its official account on X, raising security concerns among users.
📌 Key points and analysis:
• The incident targets cold-wallet users by attempting to direct them to malicious websites that resemble the legitimate platform.
• The Coldcard team immediately began investigating potential security vulnerabilities or external breaches of its social media account.
• The biggest challenge is how quickly fake links can spread through the accounts of trusted companies before support teams can intervene.
💡 Takeaway: The incident reminds us that even the official accounts of major security companies can be compromised, making it essential for investors not to click links indiscriminately.
💬 How can you protect your digital assets from phishing attacks targeting cold-storage platforms’ social media accounts?
#Coldcard #CryptoSecurity #PhishingAlert #BinanceSquare
71
·
--
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
COLDCARD’s official X account posted a phishing message today: 🚨 “Urgent security update” claimed there was a vulnerability in the firmware’s seed generation and urged users to migrate immediately—linking to migrate.coldcardwallet.io before the post was deleted.
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
The official account has acknowledged that a phishing link appeared on its account and was deleted. It emphasized that coldcard.com is the only official website. Don’t click migration links or enter your seed.
Even an official hardware wallet account can be used for phishing. What new kind of social engineering is this? Look closely at what’s wrong with the domain.
#钓鱼 #COLDCARD #HardwareWallet
114
·
--
Article
🚨 Coldcard Hack Update: 52 BTC Moved to Recovery TrustAlright guys, quick update on the Coldcard wallet hack. White-hat hackers have moved 52.37 $BTC (around $4M+) into a recovery trust. This Bitcoin belongs to people whose funds were affected by the Coldcard exploit.
So what happens now?
The BTC is now controlled by the Crypto Recovery Trust (Wyoming-based). They’ll try to find the real owners and return the funds. But proving ownership might be tricky, because wallet addresses and key verification are strict.$QI
What was the Coldcard exploit?
In simple terms: there was a vulnerability in Coldcard firmware. When generating a wallet seed, the hardware random number generator failed and fell back to a weak software-based RNG. That made seeds predictable, so attackers could potentially guess them and drain funds.$ONDO
White-hats identified some wallets before attackers did and moved the funds to a safe address. Galaxy Digital’s Alex Thorn said around 40% of Wave 2 Bitcoin was rescued by white-hats.
If you’re affected:
If you were a victim of the Coldcard exploit, check the Crypto Recovery Trust website and search your wallet address. If they’re holding your funds, you may be able to start a claim.
My take:
This is a rare positive crypto story where white-hats outsmarted hackers. 52 BTC is only a small chunk (~2.8% of the total exploit), but recovery is moving. Research on the rest is still ongoing.
If you use Coldcard, check your firmware update. Stay safe!
{spot}(BTCUSDT)
{spot}(QIUSDT)
{spot}(ONDOUSDT)
#Bitcoin #Coldcard #CryptoRecovery #BinanceSquare #FedProposesRulesForBankIssuedStablecoins
🚨 Coldcard Hack Update: 52 BTC Moved to Recovery Trust
Alright guys, quick update on the Coldcard wallet hack. White-hat hackers have moved 52.37 $BTC (around $4M+) into a recovery trust. This Bitcoin belongs to people whose funds were affected by the Coldcard exploit.
So what happens now?
The BTC is now controlled by the Crypto Recovery Trust (Wyoming-based). They’ll try to find the real owners and return the funds. But proving ownership might be tricky, because wallet addresses and key verification are strict.$QI
What was the Coldcard exploit?
In simple terms: there was a vulnerability in Coldcard firmware. When generating a wallet seed, the hardware random number generator failed and fell back to a weak software-based RNG. That made seeds predictable, so attackers could potentially guess them and drain funds.$ONDO
White-hats identified some wallets before attackers did and moved the funds to a safe address. Galaxy Digital’s Alex Thorn said around 40% of Wave 2 Bitcoin was rescued by white-hats.
If you’re affected:
If you were a victim of the Coldcard exploit, check the Crypto Recovery Trust website and search your wallet address. If they’re holding your funds, you may be able to start a claim.
My take:
This is a rare positive crypto story where white-hats outsmarted hackers. 52 BTC is only a small chunk (~2.8% of the total exploit), but recovery is moving. Research on the rest is still ongoing.
If you use Coldcard, check your firmware update. Stay safe!
#Bitcoin #Coldcard #CryptoRecovery #BinanceSquare #FedProposesRulesForBankIssuedStablecoins
So what happens now?
The BTC is now controlled by the Crypto Recovery Trust (Wyoming-based). They’ll try to find the real owners and return the funds. But proving ownership might be tricky, because wallet addresses and key verification are strict.$QI
What was the Coldcard exploit?
In simple terms: there was a vulnerability in Coldcard firmware. When generating a wallet seed, the hardware random number generator failed and fell back to a weak software-based RNG. That made seeds predictable, so attackers could potentially guess them and drain funds.$ONDO
White-hats identified some wallets before attackers did and moved the funds to a safe address. Galaxy Digital’s Alex Thorn said around 40% of Wave 2 Bitcoin was rescued by white-hats.
If you’re affected:
If you were a victim of the Coldcard exploit, check the Crypto Recovery Trust website and search your wallet address. If they’re holding your funds, you may be able to start a claim.
My take:
This is a rare positive crypto story where white-hats outsmarted hackers. 52 BTC is only a small chunk (~2.8% of the total exploit), but recovery is moving. Research on the rest is still ongoing.
If you use Coldcard, check your firmware update. Stay safe!
#Bitcoin #Coldcard #CryptoRecovery #BinanceSquare #FedProposesRulesForBankIssuedStablecoins
1
366
·
--
Ethical hackers move 52 BTC stolen to recovery fundJust 2.8% of the funds stolen in the largest 2026 hardware wallet hack were routed to a formal return mechanism, and the movement raised legal and technical questions that are still far from being resolved.
White-hat hackers moved 52.37 Bitcoin tied to the Coldcard exploit to an address associated with a recovery fund based in Wyoming, in the United States, on September 21, 2026.
The movement was identified by Galaxy Digital, whose analyst Alex Thorn tracked the transaction in block 967.948, pointing to its origin in the so-called “Wave 2” cluster of the attack. The transferred value represents only 2.8% of the total exploited in the scheme.
Ethical hackers move 52 BTC stolen to recovery fund
Just 2.8% of the funds stolen in the largest 2026 hardware wallet hack were routed to a formal return mechanism, and the movement raised legal and technical questions that are still far from being resolved.
White-hat hackers moved 52.37 Bitcoin tied to the Coldcard exploit to an address associated with a recovery fund based in Wyoming, in the United States, on September 21, 2026.
The movement was identified by Galaxy Digital, whose analyst Alex Thorn tracked the transaction in block 967.948, pointing to its origin in the so-called “Wave 2” cluster of the attack. The transferred value represents only 2.8% of the total exploited in the scheme.
White-hat hackers moved 52.37 Bitcoin tied to the Coldcard exploit to an address associated with a recovery fund based in Wyoming, in the United States, on September 21, 2026.
The movement was identified by Galaxy Digital, whose analyst Alex Thorn tracked the transaction in block 967.948, pointing to its origin in the so-called “Wave 2” cluster of the attack. The transferred value represents only 2.8% of the total exploited in the scheme.
708
Hacked funds moving to trust
Following the Coldcard hack, whitehats moved 52 BTC into a recovery trust. This shift could signal an attempt to manage the stolen funds for eventual return.
#Coldcard #BitcoinSecurity
Hacked funds moving to trust
Following the Coldcard hack, whitehats moved 52 BTC into a recovery trust. This shift could signal an attempt to manage the stolen funds for eventual return.
#Coldcard #BitcoinSecurity
Following the Coldcard hack, whitehats moved 52 BTC into a recovery trust. This shift could signal an attempt to manage the stolen funds for eventual return.
#Coldcard #BitcoinSecurity
283
·
--
52.37 BTC Moved Toward Coldcard Exploit Recovery
White-hat hackers have reportedly moved 52.37 BTC recovered from the Coldcard exploit into a Crypto Recovery Trust address.
Galaxy Research’s Alex Thorn highlighted the on-chain movement, with the destination address appearing to be linked to a recovery process for affected users.
The transfer marks another step toward potentially returning recovered funds to victims.
$BTC
{future}(BTCUSDT)
#BTC #Coldcard
52.37 BTC Moved Toward Coldcard Exploit Recovery
White-hat hackers have reportedly moved 52.37 BTC recovered from the Coldcard exploit into a Crypto Recovery Trust address.
Galaxy Research’s Alex Thorn highlighted the on-chain movement, with the destination address appearing to be linked to a recovery process for affected users.
The transfer marks another step toward potentially returning recovered funds to victims.
$BTC
#BTC #Coldcard
White-hat hackers have reportedly moved 52.37 BTC recovered from the Coldcard exploit into a Crypto Recovery Trust address.
Galaxy Research’s Alex Thorn highlighted the on-chain movement, with the destination address appearing to be linked to a recovery process for affected users.
The transfer marks another step toward potentially returning recovered funds to victims.
$BTC
#BTC #Coldcard
219
·
--
📰 In the Coldcard hacking incident, there’s been an unusual development: a “white-hat” hacker has transferred 52.37 bitcoins to an address associated with a newly established recovery trust.
This isn’t new theft—rather, some of the funds that were lost earlier due to the Coldcard vulnerability incident have been moved into dedicated recovery arrangements.
🔥 Galaxy Digital research head Alex Thorn said this amount is about 2.8% of the total stolen from the Coldcard breach. The percentage isn’t high, but it at least shows that the recovery efforts are already taking real action.
Honestly, this white-hat role is still pretty crucial. It’s not just about dealing with the vulnerability—it’s also about trying to send any already-exfiltrated assets back to addresses that are trackable and actionable. That said, in the publicly available information right now, the only amount that can be confirmed is the 52.37 BTC; it’s hard to say yet how much more can ultimately be recovered.
🤔 How much do you think of the funds moved into the recovery trust will truly end up back in the hands of affected users?
#比特币 #Coldcard #链上安全 #加密行业
📰 In the Coldcard hacking incident, there’s been an unusual development: a “white-hat” hacker has transferred 52.37 bitcoins to an address associated with a newly established recovery trust.
This isn’t new theft—rather, some of the funds that were lost earlier due to the Coldcard vulnerability incident have been moved into dedicated recovery arrangements.
🔥 Galaxy Digital research head Alex Thorn said this amount is about 2.8% of the total stolen from the Coldcard breach. The percentage isn’t high, but it at least shows that the recovery efforts are already taking real action.
Honestly, this white-hat role is still pretty crucial. It’s not just about dealing with the vulnerability—it’s also about trying to send any already-exfiltrated assets back to addresses that are trackable and actionable. That said, in the publicly available information right now, the only amount that can be confirmed is the 52.37 BTC; it’s hard to say yet how much more can ultimately be recovered.
🤔 How much do you think of the funds moved into the recovery trust will truly end up back in the hands of affected users?
#比特币 #Coldcard #链上安全 #加密行业
This isn’t new theft—rather, some of the funds that were lost earlier due to the Coldcard vulnerability incident have been moved into dedicated recovery arrangements.
🔥 Galaxy Digital research head Alex Thorn said this amount is about 2.8% of the total stolen from the Coldcard breach. The percentage isn’t high, but it at least shows that the recovery efforts are already taking real action.
Honestly, this white-hat role is still pretty crucial. It’s not just about dealing with the vulnerability—it’s also about trying to send any already-exfiltrated assets back to addresses that are trackable and actionable. That said, in the publicly available information right now, the only amount that can be confirmed is the 52.37 BTC; it’s hard to say yet how much more can ultimately be recovered.
🤔 How much do you think of the funds moved into the recovery trust will truly end up back in the hands of affected users?
#比特币 #Coldcard #链上安全 #加密行业
43
·
--
This firmware vulnerability from Coldcard is indeed a rare and serious incident in the hardware wallet field.
On July 30, attackers exploited a flaw in the random number generation process during seed creation and swept away a large amount of $BTC within about 40 minutes.
Initial confirmation put the amount at approximately 594 BTC (about $38 million at the time), coming from about 500 addresses; subsequent on-chain analysis by Galaxy Research expanded the scale to 1,082.65 BTC (about $70 million), involving 1,196 addresses.
The root cause lies in certain firmware versions after March 2021: when the device generated the seed, it failed to correctly call the hardware true random number generator, causing the entropy to drop significantly (about 40 bits on Mk3), allowing the private key to be reconstructed offline. The entire attack required no interaction with a physical device.
The official side has released a fixed firmware, but already-generated weak seeds cannot be repaired via an update. Affected users must regenerate new seeds and migrate funds as soon as possible.
CZ also publicly reminded: even hardware wallets may have vulnerabilities—risk has always existed, and there is no 100% security on-chain.
Based on the scope of impact and the technical nature, this is the largest known hardware wallet firmware vulnerability attack to date, and it has dealt a significant blow to trust in self-custody security. In normal times, it’s still recommended to pay close attention to official security advisories and avoid concentrating all assets in a single device.
#Bitcoin #Coldcard #硬件钱包 #链上安全
This firmware vulnerability from Coldcard is indeed a rare and serious incident in the hardware wallet field.
On July 30, attackers exploited a flaw in the random number generation process during seed creation and swept away a large amount of $BTC within about 40 minutes.
Initial confirmation put the amount at approximately 594 BTC (about $38 million at the time), coming from about 500 addresses; subsequent on-chain analysis by Galaxy Research expanded the scale to 1,082.65 BTC (about $70 million), involving 1,196 addresses.
The root cause lies in certain firmware versions after March 2021: when the device generated the seed, it failed to correctly call the hardware true random number generator, causing the entropy to drop significantly (about 40 bits on Mk3), allowing the private key to be reconstructed offline. The entire attack required no interaction with a physical device.
The official side has released a fixed firmware, but already-generated weak seeds cannot be repaired via an update. Affected users must regenerate new seeds and migrate funds as soon as possible.
CZ also publicly reminded: even hardware wallets may have vulnerabilities—risk has always existed, and there is no 100% security on-chain.
Based on the scope of impact and the technical nature, this is the largest known hardware wallet firmware vulnerability attack to date, and it has dealt a significant blow to trust in self-custody security. In normal times, it’s still recommended to pay close attention to official security advisories and avoid concentrating all assets in a single device.
#Bitcoin #Coldcard #硬件钱包 #链上安全
On July 30, attackers exploited a flaw in the random number generation process during seed creation and swept away a large amount of $BTC within about 40 minutes.
Initial confirmation put the amount at approximately 594 BTC (about $38 million at the time), coming from about 500 addresses; subsequent on-chain analysis by Galaxy Research expanded the scale to 1,082.65 BTC (about $70 million), involving 1,196 addresses.
The root cause lies in certain firmware versions after March 2021: when the device generated the seed, it failed to correctly call the hardware true random number generator, causing the entropy to drop significantly (about 40 bits on Mk3), allowing the private key to be reconstructed offline. The entire attack required no interaction with a physical device.
The official side has released a fixed firmware, but already-generated weak seeds cannot be repaired via an update. Affected users must regenerate new seeds and migrate funds as soon as possible.
CZ also publicly reminded: even hardware wallets may have vulnerabilities—risk has always existed, and there is no 100% security on-chain.
Based on the scope of impact and the technical nature, this is the largest known hardware wallet firmware vulnerability attack to date, and it has dealt a significant blow to trust in self-custody security. In normal times, it’s still recommended to pay close attention to official security advisories and avoid concentrating all assets in a single device.
#Bitcoin #Coldcard #硬件钱包 #链上安全
5
16
22.5k
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard
Coinkite is advising Coldcard Mk3 users to migrate funds following a potential seed-generation risk. Additionally, security experts are investigating a massive $38 million Bitcoin wallet drain.
#CryptoSecurity #Coldcard
#CryptoSecurity #Coldcard
63
·
--
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full ChainThe biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Coldcard Stolen for $110 Million: How Did the Hacker Pull It Off? I Studied It for Three Days and Laid Out the Full Chain
The biggest security incident in the crypto space these days is the randomness vulnerability in the Coldcard hardware wallet: about 5,000 wallets, 1,755 BTC stolen, worth over $110 million.
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
Most reports only say "a vulnerability in random number generation allows the mnemonic to be inferred." But as someone who wants to understand the underlying principles, I looked through a large amount of technical material (Block official analysis, Galaxy Research on-chain tracing, community PoC projects) and broke down the entire attack chain step by step. Here’s what I’m sharing with other equally curious friends.
【First, the most important takeaway】
The hacker didn’t brute-force guess the mnemonic, and he didn’t brute-force guess the private key—both of these live in a 2^256 space, which is physically impossible. What he enumerated was the internal state of the random number generator (PRNG) that produces the mnemonic. That space is only 2^32 (about 4.2 billion).
97
🚨 Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
🚨 Reports of exploitation of a security vulnerability in Coldcard wallets cause major losses
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
Security reports indicate that a vulnerability in Coldcard device wallets allowed hackers to compromise users' funds. Blockchain monitoring firms say that losses exceeded $130 million, raising questions about the security of offline storage.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ OTHER
#Coldcard #HardwareWallet #Cybersecurity #CryptoSecurity #Blockchain
📰 Source: techcrunch.com
9
🚨 Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
🚨 Theft of $140 million in Bitcoin via a vulnerability in the Coldcard wallet
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
A recent report revealed that Bitcoin coins worth $140 million were stolen by exploiting a security flaw in the Coldcard hardware wallet software. The thefts were carried out in three stages since July 2026, suggesting systematic exploitation of the vulnerability, and highlighting the importance of security vigilance for cryptocurrency users.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Cybersecurity #CryptoSecurity #HardwareWallet
📰 Source: news.livedoor.com
9
🚨 Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
🚨 Steals targeting Coldcard wallet custodians in cyber attacks
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
Coldcard wallets, a type of cold wallet (Hard Wallets) known for their security, have been subjected to a series of cyber attacks. These attacks affected more than 5,200 individuals, resulting in thefts totaling over $116 million since last Thursday, raising questions about the security of similar storage solutions.
━━━━━━━━━━━━━━
📊 Impact: 🔥 Very High
🏷️ BITCOIN
#Bitcoin #Coldcard #Security #CryptoHack #HardWallet
📰 Source: biztoc.com
1
24
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number
Trending Topics
1
#BitcoinShortTermHoldersReach4.08MBTC
20,870 views
393 Discussing
2
#BitcoinRecoversTo$82K
58,517 views
112 Discussing
3
#OctoberFedHikeOddsFallToAround17%
8,398 views
259 Discussing
4
#NEARRisesNearly10%
92,356 views
841 Discussing
5
#SouthKoreaTightensOversightOfOverseasPerpetualContracts
2,808 views
51 Discussing
6
#RiksbankUrgesLawmakersToPrepareDigitalKronaLegislation
2,735 views
58 Discussing
7
#AIAndSemiconductorStocksLoseOver$1TThisWeek
3,911 views
53 Discussing
8
#AustraliaProposesCryptoTransactionReportingLaw
66,945 views
923 Discussing
9
#SolanaAlpenglowUpgradeToActivateOnOct21
43,767 views
761 Discussing
10
#USSeptemberPPIRisesTo6.3%
36,484 views
603 Discussing