$70M Heist Exposes Weakness in Bitcoin Cold Wallet Security
A recent attack on Bitcoin cold wallets drained over $70 million from nearly 1,200 wallets without any physical access or network intrusion.
According to a report by Galaxy Research, the attacker exploited weak seed generation in the wallets, allowing them to recreate private keys offline and sweep funds remotely.
The exploit targeted the randomness used when the wallets were first created, rather than a hardware vulnerability or network intrusion.
Galaxy's investigation found that an attacker who understands how to identify weak seeds can compute likely private keys offline and drain them before anyone notices.