VulnerabilityBleeping Computer
9.8 — CRITICAL
COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft
A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A vulnerability in COLDCARD wallet firmware's random number generator was exploited to steal an estimated $88.6 million in Bitcoin, with thousands of wallets affected.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
users with COLDCARD Mk2, Mk3, Mk4, Mk5, and Q devices running firmware versions prior to the patched version
🛡️Recommended Actions
1Update firmware to version 4.2.0 or later for affected devices
2Verify existing backup and generate a new seed
3Send a small test transaction after verifying the new wallet address on the device
📦Affected Products
Device Type: COLDCARD hardware walletsSpecific Versions:Mk2 firmware versions 4.0.1 through 4.1.9Mk3 firmware versions 4.0.1 through 4.1.9Mk4 and Mk5 devices before standard version 5.6.0 or Edge version 6.6.0XQ devices before standard version 1.5.0Q or Edge version 6.6.0QX
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.