News category
Security & incidents
Hacks, vulnerabilities, fraud, asset loss and security-control disclosures.
Image: CoinDeskColdcard Exploit Shakes Faith in Self-Custody and May Accelerate ETF Adoption
A software bug in popular hardware wallet Coldcard has led to the theft of nearly 600 bitcoin worth roughly $38 million, according to a report published by CoinDesk. This incident, which is not officially confirmed by all independent audit bodies, raises fundamental questions regarding private key management.
Latest coverage
Security & incidents
Page 2 of 7
CoinDeskColdcard Exploit Shakes Faith in Self-Custody and May Accelerate ETF Adoption
A software bug in popular hardware wallet Coldcard has led to the theft of nearly 600 bitcoin worth roughly $38 million, according to a report published by CoinDesk. This incident, which is not officially confirmed by all independent audit bodies, raises fundamental questions regarding private key management.
crypto.newsSwan Treasury Suffers Estimated $625K Loss Following Off-Chain Signer Key Compromise on BNB Chain
According to reporting by crypto.news, blockchain asset management protocol Swan Treasury lost an estimated $625,000 after attackers utilized a compromised off-chain signer key to acquire STY tokens at a massive discount on BNB Chain. This reported event is not officially confirmed by the entity.
theblock.co via LBankCoinkite Issues Coldcard Mk3 Warning Amid Reported Bitcoin Drains Not Officially Confirmed
According to reporting by LBank News via The Block, hardware wallet manufacturer Coinkite issued a security advisory warning that Coldcard Mk3 devices running firmware version 4.0.1 or later might generate seeds with potential vulnerabilities. This advisory follows reports of roughly 594.5 BTC being drained from multiple single-signature addresses. The link between the advisory and the reported wallet drains is not officially confirmed.
decrypt.co via LBankColdcard Hardware Wallet Firmware Flaw Leads to Million-Dollar Bitcoin Drains in Reported AI-Assisted Exploit
According to reporting by LBank News citing decrypt.co, hardware wallet maker Coinkite disclosed that a build error caused seeds to be generated from a software fallback rather than the hardware generator. Coinkite believes attackers utilized artificial intelligence to uncover the vulnerability, which has not officially confirmed by independent law enforcement.
crypto.news via LBankColdcard Mk3 Warning Follows Large Bitcoin Drain While Investigators Explore Potential Entropy Flaws
According to reporting by LBank News and crypto.news, Coinkite issued an advisory for Coldcard Mk3 devices running specific firmware versions following a massive digital asset transfer involving hundreds of coins. Investigators have observed suspicious wallet drainage patterns, though a direct connection to the hardware device vulnerability is not officially confirmed.
CoinDeskFake Flare Network Staking Site Reportedly Drains $8.5 Million in XRP from Dozens of Investors in South Korea
CoinDesk has reported that a fake Flare Network staking website allegedly stole $8.5 million in XRP from at least 71 investors in South Korea, with Seoul police warning that total losses may approach $20 million. Two suspects have been detained, and a third remains at large. These details are not officially confirmed and are based on media reporting.