Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Noor Bakker

Noor Bakker

2d ago
2 0

Discussion

Break the silence

Take the opportunity to kick things off.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

EM

Emma Klein

Emma KleinUpvoted 1d ago0 comments · 24 shares
g_richard

Golden Greta

Golden GretaUpvoted 2d ago1 comments · 39 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Google Password Manager Attacks Could Let Malware Hijack Passke…

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
TN

The Hacker News

2026-08-03 19:09
0
bleepingcomputer.com
Google Chrome may soon block New Tab hijacker extensions by def…

Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search e…
RM

ryan maybe

1d ago
0
bleepingcomputer.com
Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentiall…
RM

ryan maybe

1d ago
0
thehackernews.com
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Ac…

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet a…
EK

Emma Klein

2d ago
0
schneier.com
Friday Squid Blogging: Squid Helps Discover New Marine Species

The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid,…
SS

Schneier on Security

2d ago
0
bleepingcomputer.com
Amgen says cloud data breach exposed patient health, proprietar…

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems o…
Giulia

Giulia

2d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Google Password Manager Attacks Could Let Malware Hijack Passke…

Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
TN

The Hacker News

2026-08-03 19:09
0
thehackernews.com
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Ac…

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet a…
EK

Emma Klein

2d ago
0
thehackernews.com
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without Us…

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform…
alex but tired

alex but tired

2d ago
0
thehackernews.com
Suspected Chinese-Speaking Hackers Target Central Asian Governm…

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, incl…
MB

Maria Bakker

2d ago
0
thehackernews.com
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Cry…

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages di…
Giulia

Giulia

3d ago
0
thehackernews.com
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Acce…

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, thi…
TN

The Hacker News

4d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest