A hardware wallet randomness bug turned “impossible to guess” seeds into guessable ones, and $38 million is already gone. An attacker exploited a flaw in how some Coldcard hardware wallets generated keys to steal roughly 594 bitcoin, worth about $38 million, from around 500 single-signature wallets in under 30 minutes. The vulnerability, introduced in Coldcard firmware 4.0.0 in March 2021, caused devices to skip their hardware randomness generator and fall back to predictable software-based key…
Why this update matters
This developing story is relevant for readers tracking cryptocurrency because it reflects fresh changes from the original source and signals where attention is shifting next.
Key details
The report was collected automatically and prepared for publication with a newsroom workflow that focuses on clarity, search visibility, and quick understanding.
Readers should review the original source for direct statements, official notices, and any later corrections or additions as the story evolves.
Related coverage
Continue reading with more reporting from the same topic cluster.