Coldcard wallet attack drains up to $89M in Bitcoin from 1,200+ addresses

TL;DR

Prime Big Deal Days · Oct 6–7Offer from Amazon

Get hardware and tech essentials delivered free — and shop member deals

• Fast, free delivery on millions of items
• Access to Prime Big Deal Days deals on October 6–7
• Prime Video, Amazon Music and more included

Start your free Prime trial →Free trial for eligible customers · Cancel anytime

As an affiliate, we earn on qualifying purchases.Hide

An attack targeting Coldcard hardware wallets has stolen approximately $89 million in Bitcoin from more than 1,200 addresses. The breach highlights ongoing security challenges for hardware wallet users. Details are still emerging, and investigations are ongoing.

Security researchers have confirmed that a breach targeting Coldcard hardware wallets has resulted in the theft of approximately $89 million in Bitcoin from over 1,200 addresses. The attack, which appears to exploit a vulnerability in the device’s firmware or supply chain, is considered one of the largest hardware wallet breaches to date and has significant implications for cryptocurrency security.

According to initial reports from cybersecurity firms, the breach was identified after users reported unauthorized transactions from their Coldcard wallets. The attack reportedly involved malware or a manipulated firmware update that allowed hackers to drain funds directly from affected devices. The affected addresses span a wide user base, with losses estimated at up to $89 million, though the exact number of compromised wallets remains under investigation.

Coldcard, a popular hardware wallet designed for secure Bitcoin storage, has not officially confirmed the breach but has acknowledged ongoing investigations. Experts suggest that the attack may involve a supply chain compromise or a vulnerability in the firmware update process, though details are still emerging. No official statement has been issued about the scale or method of the breach.

Potential Impact on Hardware Wallet Security and User Trust

This incident underscores the ongoing risks associated with hardware wallets, which are generally considered secure for cold storage. The theft of up to $89 million highlights that even specialized security devices can be vulnerable to sophisticated attacks. For users, this raises concerns about supply chain security, firmware integrity, and the importance of vigilant security practices. The breach could influence industry standards and prompt calls for enhanced security measures across hardware wallet manufacturers.

Recent Trends in Cryptocurrency Security Breaches

Over the past year, several high-profile security incidents have targeted cryptocurrency users, including exchange hacks and wallet exploits. While hardware wallets are designed to provide cold storage, recent breaches indicate that attackers are increasingly targeting supply chains and firmware updates. The Coldcard attack follows similar incidents involving other hardware wallets, emphasizing the evolving threat landscape in crypto security.

“We are actively investigating these reports and are committed to ensuring the security of our users. No official confirmation of the breach has been made at this time.”

— Coldcard spokesperson

Details of the Attack Method and Scope Still Unclear

It is not yet confirmed how the breach was executed, whether through firmware manipulation, supply chain compromise, or another vector. The total number of affected wallets and the precise method used remain under investigation. Coldcard has not released detailed technical information, and security experts warn that further details may still be forthcoming.

Ongoing Investigation and Industry Response Expected

Authorities and cybersecurity firms are continuing their investigation into the breach, with potential updates on the attack vector and affected users. Coldcard and other hardware wallet manufacturers may implement additional security measures. Users are advised to monitor official channels for updates and consider security best practices, such as firmware verification and supply chain vigilance.

Key Questions

How did the attack on Coldcard wallets happen?

The exact method remains unconfirmed, but preliminary reports suggest it involved firmware manipulation or a supply chain compromise. Investigations are ongoing.

How much Bitcoin was stolen in the breach?

Estimates indicate up to $89 million worth of Bitcoin was drained from over 1,200 addresses, but the precise total is still being verified.

Are Coldcard wallets still safe to use?

While Coldcard wallets are generally regarded as secure, this incident highlights the importance of firmware verification and supply chain security. Users should follow best practices and stay informed about updates.

What should affected users do now?

Users are advised to review their wallet security, monitor official updates, and consider transferring funds to secure storage. Consulting with cybersecurity experts is also recommended.

Source: rss