Coldcard Wallet Theft Exposes Weak Seed Randomness Across Multiple Models
A recent Coldcard wallet theft has stolen around $38 million worth of BTC from about 500 wallets within a span of just 25 minutes.
The attack was linked to a firmware flaw that weakened randomness during seed creation on certain Coldcard models, including Mk3, Mk4, and Mk5 devices.
According to Coinkite, the firm behind Coldcard, the affected seeds were created using firmware versions 4.0.1 through 4.1.9 for Mk3, and versions 5.6.0 or earlier for Mk4 and Mk5 models.
The stolen funds have not caused a confirmed market-wide selloff, but they add another layer of pressure as Bitcoin trades near $62,600, with the $60,000 support level still in focus.