Coldcard Hack Exposes Vulnerability in Highly Touted Hardware Wallets

A recent hack of the Coldcard hardware wallet has drained $116 million from over 5,200 individual addresses. Tim Lamb, a bitcoin holder, was affected by the hack while on vacation in the Channel Islands, losing two bitcoins worth approximately $130,000.

The breach targeted Coldcard devices, which were marketed as highly secure offline storage for long-term bitcoin holders. However, an investigation found that a 2021 software update weakened how Coldcard generated recovery phrases, making them vulnerable to exploitation.

According to blockchain intelligence firm Galaxy Research, attackers moved approximately 1,816 stolen bitcoins, worth close to $116 million, out of the affected wallets in four separate waves of theft. Coinkite, the Canadian firm behind Coldcard, has urged users who generated a wallet seed on a Coldcard device to move their funds immediately.

The incident raises questions about the security of even highly touted hardware wallets and the importance of blind trust in such products. The hack also highlights the need for accurate reporting in cryptocurrency news, as misinformation can spread quickly and create confusion among holders.