Coldcard Firmware Flaw Linked to Massive Bitcoin Heist
Coldcard wallet users are facing concerns about security after a $70 million Bitcoin theft on July 30. The incident involved 1,196 addresses and 1,082.65 BTC.
Researchers at Galaxy Research linked the breach to a firmware flaw in Coldcard devices running affected software versions.
The coordinated withdrawals occurred within 41 minutes, making it one of this year's largest reported hardware wallet incidents.
Coinkite, the company behind Coldcard, first warned users about the issue on March 2021 firmware version 4.0.1. It later expanded its advisory to selected firmware versions on other Coldcard models, including Mk3, Mk5, and Q devices.