👾#Crypto
Hackers have stolen 594 BTC from Coldcard Mk3 hardware wallets.
On July 30, around 594.5 BTC (roughly $38 million) was drained from about 500 wallets. Every affected address was single-sig — no multisig or Taproot wallets were involved.
Seed phrases generated on Mk3 devices running firmware 4.0.1–5.0.3 (released since March 2021) may be compromised due to weak entropy (around 72 bits instead of 128+).
In some cases, the random number generator skipped the hardware TRNG and relied on predictable inputs, including button presses during setup. This allowed attackers to reconstruct private keys offline.
23
22
18July 31, 2026 9K 12
