Coldcard Firmware Vulnerability Linked to at Least $88.6 Million in Bitcoin Theft
Summary
Galaxy Research reported at least 1,367.05 BTC stolen from 4,585 addresses through an exploited Coldcard firmware vulnerability. Coinkite destroyed remaining inventory made with the vulnerable firmware and released a patch.
Key points
- Galaxy Research reported at least 1,367.05 BTC, worth about $88.6 million, stolen from 4,585 addresses.
- Coinkite said a Coldcard firmware vulnerability discovered in 2021 was being exploited to breach customer accounts.
- Chainalysis said the attacker prioritized high-value wallets; two of the largest victims reportedly lost a combined $4 million.
- Coinkite destroyed its remaining inventory made with the vulnerable firmware and halted shipments.
- Coinkite released patched firmware and said it was working with customers and law enforcement to help recover funds and identify those responsible.
Article Details
- Victim Organization
- Coinkite
- Incident Type
- Exploitation of a Coldcard firmware vulnerability to steal bitcoin from customer wallets
- Data Types Exposed
- Bitcoin funds (stolen)
- Affected Records
- 4,585 wallet addresses, according to Galaxy Research
- Affected Data Size
- At least 1,367.05 BTC, valued at approximately $88.6 million, according to Galaxy Research
- Operational Impact
- Coinkite destroyed its remaining inventory manufactured with the vulnerable firmware, halted shipments, released patched firmware, and worked with affected customers to move funds.
- Ransom Or Extortion
- Unknown; no ransom or extortion activity is reported in the source.
- Claim Status
- confirmed