At least 1,719 BTC, worth approximately $111 million, has been stolen through a security vulnerability in Coldcard wallets. Investigators from Galaxy Research have identified over 25 distinct attack patterns across three waves, suggesting multiple malicious actors exploited the flaw. The exploit targeted Mk3, Mk4, Mk5, and Q models running firmware released after March 17, 2021, with total losses potentially exceeding $130 million. On July 30, an attacker drained approximately 594 BTC, valued at $38 million, from 500 wallets within 15 to 25 minutes. Bitcoin’s core network remained unaffected.
Source: Read the original article
