Bitcoin Heist Sparks Fears Over Hardware Wallet Security Amid $38M Coldcard Exploit
A recent exploit targeting Coldcard's hardware wallet allowed hackers to steal $38M worth of BTC. The flaw, which downgraded the True Random Number Generator (TRNG) from a 128-bit system to a guessable 40-bit system, has left investors worried about the security of their Bitcoin holdings.
Ledger and Trezor, two prominent hardware wallet providers, have distanced themselves from the Coldcard flaw, assuring users that their wallets are not affected. Ledger uses a more secure design with a 256-bit mathematical complexity system (entropy) to protect seed phrases, while Trezor operates independently without sharing code with Coldcard.
Coinbase CEO Brian Armstrong weighed in on the incident, suggesting that 'air-gapping keys' can help reduce physical security threats. However, this advice has not alleviated concerns about self-custody and the risks associated with holding private keys directly.