Coldcard Exploit Hits Canadians Hardest

The Coldcard wallet exploit has had a disproportionate impact on Canadian users, with Chainalysis attributing 25% of the estimated losses to this group. According to the firm's analysis, local popularity and influencer campaigns contributed to the widespread adoption of the wallet in Canada, where inadequate entropy and vulnerable address generation made it an attractive target for hackers.

The exploit has affected not just Canadian users but also those in the USA and Thailand, with estimated losses ranging from $110M to $150M. The incident has led to a renewed focus on security measures, with the Red Team initiative using AI analysis to identify vulnerabilities in the Bitcoin ecosystem.

The Red Team has spent over $20,000 on tokens and secured further funding to continue its work, scanning 150 code repos to date and contacting related parties. The team is also working with OpenAI to run Cyber Harness, a more thorough model of scanning for vulnerabilities, and using the free Kimi K3 model to find flaws in crypto codebases.

Alex Thorn, head of Firmwide Research, notes that the attack came in multiple waves, with the first being the biggest. The stolen funds have been largely frozen, but some mixing has occurred, with one wallet engaging in early mixing by performing a series of transactions to move funds to new addresses.