Coldcard Hack Exposes Seeds, Allows Attacker to Steal $70M Worth of BTC
A recent hack on Bitcoin-only hardware wallet Coldcard by Canadian firm Coinkite resulted in the theft of $70.2 million worth of BTC, according to a report by Galaxy Research.
The attacker drained 1,196 Bitcoin addresses in just 41 minutes on July 30, with most of the stolen funds being taken from wallets using firmware versions that were affected by a March 2021 integration error.
This error routed seed generation to a deterministic software pseudorandom number generator (PRNG) instead of the STM32 hardware random number generator (RNG).