Coldcard hardware wallet theft attack continues, with a total loss of approximately US$88.6 million

On August 3, the Coldcard hardware wallet coin theft attack continued. Three rounds of attacks stole a total of 1367 BTC items from 4585 addresses, with a total loss of approximately US$88.6 million. GalaxyResearch pointed out that the vulnerability originated from a flaw in firmware random number generation in March 2021. Hackers relied on large models to programmatically crack private keys in batches, and all single-signed addresses generated by this version of firmware were at risk of theft. Stolen coins sleep for an average of 3.18 years. Most of the victims are long-term holders, and the stolen funds are temporarily stored at the hacker's address without being transferred. The incident subverted the industry consensus that "self-custody is safer". A large number of users panicked and transferred Bitcoin from cold wallets back to centralized exchanges to avoid risks. Some users have stored their wallets in bank safes, and the entire network was disconnected, but their assets were cleared within minutes. The agency has marked about 600 hacker addresses and submitted them to law enforcement agencies. Officials urgently reminded relevant users to immediately transfer all assets in their wallets.