Coldcard Exploit Spreads as Attackers Drain Millions in Bitcoin

A vulnerability in Coldcard firmware has led to multiple attackers draining Bitcoin from wallets, according to Galaxy Research. At least 15 separate attackers have been identified, with a total of 1,596 BTC (over $100 million) taken from approximately 7,300 addresses as of Tuesday.

Galaxy's head of research, Alex Thorn, stated that 'now numerous different attackers are exploiting the Coldcard vulnerability.' The coin total has risen by about 17% over two days, while the number of drained addresses increased by around 59%.

The suspected fourth wave, which Galaxy holds with medium-high confidence but hasn't been confirmed through victim reports, would lift the total to approximately 2,055 BTC (about $130 million) across more than 7,700 addresses.