Coldcard Breach Sees 52.37 BTC Moved as Exploiter Routes Stolen Funds
The recent Coldcard breach has led to a significant movement of funds, with a total of 52.37 BTC being transferred to a trust. This development comes after an entropy flaw in Coldcard devices was disclosed, sparking debate over whether hardware wallets are a point of failure within the sector.
Coldcard Attacker Routes Stolen Funds: The attacker linked to the breach has started moving the stolen Bitcoin for the first time, shifting 97.09 BTC worth $7.7 million through THORChain and CoinJoin while working through the largest vaults.
Galaxy Research Attributes Losses: Galaxy research head Alex Thorn stated that the exploiter linked to the third wave of Coldcard thefts has started moving stolen Bitcoin for the first time, with over half of the victims losing more than 1 BTC. In fact, Galaxy attributes 1,789.28 BTC stolen from 8,865 addresses to the Coldcard exploit, worth $114.7 million, with median reported losses above 1 BTC.
Coldcard Enhances Seed Generation: Following the security breach, Coinkite released firmware version 5.6.1 for Coldcard Mk4 and Mk5 devices, and version 1.5.1Q for the Coldcard Q, with the goal of strengthening seed phrase generation.