Attackers drain 1,367 bitcoin from 4,585 addresses
A vulnerability in a March 2021 Coldcard firmware release has enabled attackers to systematically drain bitcoin from thousands of wallets.
The attackers have reproduced keys generated with weak software-based randomness, resulting in the loss of nearly $89 million.
The latest wave of attacks targets smaller balances and uses more complex transaction patterns, making it harder to trace the funds.
The total losses now stand at 1,367 bitcoin, with the attackers emptying wallets worth a few thousand dollars each.