🔐 Coldcard Wallet Flaw Linked to $100M in Bitcoin Losses
A vulnerability in Coldcard hardware wallets has been tied to losses exceeding $100 million in Bitcoin, reigniting debate over entropy quality in key generation and the reliability of dice-based randomness.
The exploit centers on how private keys are generated. Insufficient entropy — the randomness required to produce a secure key — can result in keys that are predictable and therefore vulnerable to brute-force attacks. The incident has raised scrutiny over whether Coldcard's key generation process adequately mixed user-supplied dice rolls with device-generated randomness, or whether one source could undermine the other.
The case highlights a longstanding tension in hardware wallet design: users who manually input dice rolls to generate keys may believe they are adding security, while a flawed implementation could negate that assumption entirely.
🔐 Coldcard Warns Users as Live Exploit Drains $114M
Coldcard's manufacturer has confirmed an active security flaw in its hardware wallets remains unpatched, urging users to move their bitcoin immediately.
The exploit has been linked to roughly $114 million in losses, with specific Coldcard models and firmware versions still exposed. The company has not yet released a fix, making the vulnerability live for affected devices.
Users with impacted models and firmware are advised to transfer funds to a secure address until a patch is available.
🔐 Five Convicted Over London Kidnap Plot Targeting Crypto Millionaires
A UK court has convicted five individuals for imprisoning and torturing crypto millionaires in London, in a case that resulted in convictions without either victim testifying.
Two of the five were additionally found guilty of conspiracy to blackmail. The case marks a notable example of violent crime targeting individuals known for significant cryptocurrency holdings.
An FBI agent has been arrested on charges of stealing approximately $1 million in cryptocurrency from accounts described as "adversarial cryptocurrency accounts."
The agent allegedly misappropriated the funds while working in a law enforcement capacity, using access to seized or monitored crypto holdings. Reports note the agent reportedly consulted ChatGPT to plan vacation spending — an detail that surfaced during the investigation.
The case adds to a pattern of insider misconduct within agencies handling digital asset seizures, raising scrutiny over oversight mechanisms for law enforcement personnel with access to confiscated cryptocurrency.
🔐 Coldcard-Linked Bitcoin Hack Approaches $114M in Losses
A hack targeting Coldcard hardware wallet users has grown to nearly $114 million in potential losses, highlighting a sharp escalation in threats against self-custody Bitcoin holders.
AI is identified as a key vector in the attack, underlining a broader trend of artificial intelligence being weaponized against crypto users and infrastructure.