> TritonInfoSec News
Home / Aug 02, 2026 / Story
0
#1 The Hacker News general August 01, 2026 at 17:17 UTC

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

By [email protected] (The Hacker News)

AI Summary

A firmware flaw in Coldcard hardware wallets — introduced via a March 2021 firmware integration error that routed seed generation to a deterministic software PRNG — enabled an attacker to drain 1,196 Bitcoin addresses in just 41 minutes on July 30, stealing 1,082.65 BTC (~$70.2M). Galaxy Research performed the forensic sweep and attributed the exploit to Coinkite's Coldcard device. This is a critical finding for anyone relying on hardware wallets for custody security, as it demonstrates that supply-chain-level firmware bugs can silently compromise cryptographic key generation.

Read full article → https://thehackernews.com/2026/08/coldcard-hardwar…

Relevance score: 92.0/100

# More from August 02

  1. 2
    Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware The Hacker News
  2. 3
    Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction The Hacker News
  3. 4
    Rails patches critical Active Storage flaw with RCE potential BleepingComputer
  4. 5
    What the Hugging Face breach reveals about defense in the age of agentic AI CyberScoop
  5. 6
    Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations SecurityWeek
  6. 7
    Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites The Hacker News
  7. 8
    Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers SecurityWeek
  8. 9
    Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw The Hacker News
  9. 10
    Amgen says cloud data breach exposed patient health, proprietary info BleepingComputer