A recent data breach has impacted Coldcard, a bitcoin-only hardware wallet, resulting in hackers siphoning off over $100 million USD worth of bitcoin from these wallets. The breach was disclosed by blockchain intelligence firm Galaxy Research, shedding light on the ongoing situation, its impact on users, and necessary security measures to safeguard cryptocurrency assets.
Coldcard, developed by Coinkite based in Toronto, functions as a hardware wallet that does not directly store bitcoin. Instead, it enhances security by keeping “seed phrases” offline within the physical device, adding an extra layer of protection. These seed phrases, serving as master keys, enable users to authorize and sign transactions securely.
The breach, discovered due to a software bug, enabled hackers to reconstruct wallet seed phrases without physical access to the device. As a result, substantial bitcoin losses have been reported, with ongoing investigations revealing multiple attack waves. Coinkite has issued firmware updates to address the vulnerability and advised affected users to transfer their funds promptly.
While the culprits behind the breach remain unidentified, the compromised wallets pose a risk to users. The majority of stolen bitcoins have not been moved since the theft, prompting caution as hackers may await the right moment to transfer the funds. Law enforcement agencies and cybersecurity entities are actively involved in tracking down attacker addresses to mitigate further risks.
To mitigate potential risks, users are urged to update their Coldcard firmware and replace vulnerable seed phrases. Coinkite continues to investigate the incident, emphasizing the importance of taking immediate action to secure assets. Additionally, affected users are advised to consider transferring their funds to safer platforms or generating fresh seed phrases for enhanced security.
The breach underscores the vulnerability of cryptocurrency assets and the necessity of proactive measures to safeguard digital wealth. Coldcard users are urged to stay vigilant, follow security recommendations, and remain informed about ongoing developments to protect their investments.