> TritonInfoSec News
Home / Aug 03, 2026 / Story
0
#1 BleepingComputer general August 02, 2026 at 21:14 UTC

COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft

By Lawrence Abrams

AI Summary

A flawed random number generator (RNG) in COLDCARD hardware wallet firmware enabled attackers to compromise wallet seed generation, resulting in an estimated $88.6 million in Bitcoin stolen from thousands of affected wallets. This is a critical supply-chain-level vulnerability in a widely trusted cold storage device, directly impacting users who generated seeds on vulnerable firmware versions. Security practitioners should advise clients using COLDCARD wallets to audit firmware versions and consider wallet migration immediately.

Read full article → https://www.bleepingcomputer.com/news/security/col…

Relevance score: 88.0/100

# More from August 03

  1. 2
    Ruby on Rails Patches Critical Vulnerability SecurityWeek
  2. 3
    This month in security with Tony Anscombe – July 2026 edition WeLiveSecurity (ESET)
  3. 4
    Google Chrome may soon block New Tab hijacker extensions by default BleepingComputer
  4. 5
    Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments SecurityWeek
  5. 6
    Defcon's new badge is a security key you can see inside Ars Technica Security
  6. 7
    OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems BleepingComputer
  7. 8
    Cybersecurity, Then & Now Dark Reading
  8. 9
    As Reddit stock falls, CEO questions value of Google's AI Overviews Ars Technica Security
  9. 10
    Review: Yes, we're still arguing about Nolan's The Odyssey Ars Technica Security