Coldcard Hardware Wallets Hit by $38M Bitcoin Heist

A security flaw in certain Coldcard hardware wallets was exploited to steal $38 million worth of Bitcoin, according to blockchain analytics platform Onchain Lens.

The attacker took advantage of a weakness in key generation on affected devices, draining funds from roughly 500 single-signature wallets in about 25 minutes.

The issue impacted wallet seeds created on Coldcard Mk3 devices running firmware version 4.0.1 or later.

Coldcard maker Coinkite said its preliminary analysis indicates the vulnerability does not affect the Mk4, Q, or Mk5 hardware wallet models.