Coldcard Flaw Claims $114 Million in Just 24 Hours
The Coldcard flaw continues to claim victims, with losses reaching $114 million in just 24 hours. The fourth wave of attacks has been detected by Galaxy Research, with 448.73 BTC stolen from 709 addresses.
No victim has confirmed this latest wave, which is based on an analysis of on-chain patterns. The firm's researcher Alex Thorn spotted a pattern of fund-draining across 15 consecutive blocks at a rate roughly 45 times higher than normal.
The total losses now stand at nearly $114 million, with over 1,816 BTC stolen from 5,193 addresses. This is an increase of more than 60% in just one day, and it's not clear when the attacks will stop.
Coinkite fixed the firmware flaw within 48 hours, but the fix only prevents the creation of new vulnerable seeds. Wallets already compromised before the update remain exposed as long as their funds haven't been migrated.