Fourth wave of Coldcard attacks targets 709 addresses, moves 448 Bitcoin
Galaxy researcher Alex Thorn identified hundreds of coordinated transactions affecting Coldcard users after a previously unknown firmware flaw exposed wallet seeds to reduced entropy.
A fourth coordinated attack wave on Coldcard hardware wallet users has swept approximately 448.7 Bitcoin from 709 addresses, Galaxy research head Alex Thorn reported. The attack pattern showed 13.8 transaction sweeps per block, roughly 45 times the rate observed before the incident, with each victim typically receiving a fresh destination address rather than funds converging on a single collection wallet.
The activity represents the latest phase following disclosure of a previously undetected Coldcard firmware vulnerability that caused affected devices to generate wallet seeds with reduced entropy compared to intended levels. Earlier estimates suggested thousands of wallets have been compromised, with over $90 million in Bitcoin stolen across all attack waves.
Thorn flagged additional vulnerable transactions currently pending confirmation in the mempool. Users who control the relevant private keys may be able to broadcast conflicting transactions with higher fees to move their funds to secure wallets before attacker transactions are confirmed, creating a narrow window to recover assets.
These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.
More on Bitcoin All pieces →
- Neutral Block Files for US National Trust Bank Charter to Consolidate Crypto Custody
- Neutral Tokenized Asset Holders Cross 3.5 Million as Institutional Inflows Rebound
- Neutral Iran Eases Currency Restrictions to Permit Cross-Border Crypto Settlements
- Neutral Block Seeks OCC Approval for Builders Bank & Trust to Manage Digital Assets
Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.