A suspected fourth wave of attacks targeting vulnerable Coldcard-generated Bitcoin wallets may already be underway, with blockchain researcher Alex Thorn warning on August 3 that almost 449 BTC had been swept in about two and a half hours. Thorn identified 218 transactions affecting 462 suspected victim addresses between Bitcoin blocks 960778 and 969792, moving nearly 449 BTC to newly created destination addresses. The first three confirmed waves drained 1,367 BTC, valued at around $85.7 million, from 4,585 Bitcoin addresses, with those funds still sitting in attacker-controlled wallets. The vulnerability stems from seeds generated on certain Coldcard firmware versions released after March 2021, affecting Mk3, Mk4, Mk5 and Q devices. Coinkite has confirmed the issue and urged users to immediately migrate to a new seed on an unaffected device.
Source: Read the original article
