Coldcard Bitcoin Exploit Sees Fourth Wave of Attacks

A fourth wave of attacks targeting Coldcard hardware wallets appears to be underway. Reports indicate that over 380 Bitcoin moved from 462 addresses in a sudden burst of activity. This follows previous patterns where attackers exploited flaws in the random number generator used by certain devices, leading to nearly 90 million dollars in total losses so far.

Observers noted an unusual spike in transaction volume, which is roughly 45 times the normal rate. The pattern of these transactions matches previous breaches, suggesting that the same group is behind this latest effort. Some transactions are still sitting in the Bitcoin mempool, where victims may be able to use a fee replacement feature to outbid attackers and save their funds.

In response to the growing crisis, the company behind Coldcard halted shipments and destroyed all remaining devices that carried the flawed firmware. They are advising all users to generate a fresh seed and move their funds to a new location. While other products like Opendime and Tapsigner remain safe, this incident highlights the significant risks associated with hardware wallet security and firmware vulnerabilities.

Industry experts continue to monitor the situation closely as the total stolen amount climbs. Anyone using these devices should prioritize moving their assets immediately. The company is currently working with law enforcement and the broader crypto security community to address the aftermath of these coordinated attacks.