an hour ago
Coldcard flaw causes loss of about 1,816 BTC from over 5,200 addresses
About 1,816 BTC were transferred out from over 5,200 addresses, as a Coldcard firmware vulnerability bypassed the hardware random number generator
Odaily
A Coldcard firmware vulnerability caused over 5,200 addresses to lose approximately 1,816 BTC between July 30 and August 4. The lost BTC was worth about $116 million. The flaw affects firmware version 4.0.1 and later and allows the hardware random number generator to be bypassed.
According to Bitcoin News monitoring, Coinkite CEO Rodolfo Novak (NVK) said a new AI model found the flaw after human reviewers missed it. Bitcoin developers have raised objections. Novak said at least 15 reviews had previously taken place. James O'Beirne said O'Beirne had privately flagged problems with Coldcard's random number generation in May 2025.
A firmware update can correct the problem for new devices. However, a firmware update cannot repair existing mnemonic phrases, so affected users need to generate new mnemonic phrases.
This content is an AI-generated summary/analysis for informational purposes only and does not constitute investment advice.