Story thread · 2 reports / 2 sources

A shocking storage exploit bankrupts Bitcoiners — with lessons for us all

theblaze.com · 7d · first reportShare

Coldcard, one of the better-known hardware wallets in the Bitcoin world, shipped a firmware bug that weakened the secret keys protecting customers' money. By Saturday afternoon, Galaxy Research had identified three waves of suspected theft totaling 1,367.05 Bitcoin, worth about $88.6 million, across 4,585 addresses. That is the observed damage, not necessarily the final bill. Galaxy's method spots a particular attacker's habits on the public Bitcoin ledger. The researchers warn that another thief could change a few details and blend into ordinary wallet traffic, making additional thefts much harder to count. An address is not the same thing as a person, either, so 4,585 addresses does not mean 4,585 victims. The actual number of people robbed remains unknown . The danger had not passed by Saturday evening. Galaxy warned that exploitation was ongoing and said it had sent roughly 600 suspected attacker holding addresses to federal investigators, compliance teams, and independent cyber in