News category
Security & incidents
Hacks, vulnerabilities, fraud, asset loss and security-control disclosures.
Image: crypto.newsColdcard Hardware Wallet Exploit Triggers Industry-Wide Demand for Independent Entropy Audits Following Multimillion-Dollar Bitcoin Thefts
A multi-year seed-generation vulnerability in Coldcard hardware wallets has sparked urgent calls for independent firmware testing after suspected attacks drained nearly $90 million worth of Bitcoin from thousands of addresses. Kraken chief security officer Nick Percoco argued that hardware wallet manufacturers should not remain the sole parties verifying wallet secret generation. Publisher reports indicate that these allegations are not officially confirmed by comprehensive first-party forensic audits across every impacted victim wallet.
Latest coverage
Security & incidents
Page 59 of 66
crypto.newsColdcard Hardware Wallet Exploit Triggers Industry-Wide Demand for Independent Entropy Audits Following Multimillion-Dollar Bitcoin Thefts
A multi-year seed-generation vulnerability in Coldcard hardware wallets has sparked urgent calls for independent firmware testing after suspected attacks drained nearly $90 million worth of Bitcoin from thousands of addresses. Kraken chief security officer Nick Percoco argued that hardware wallet manufacturers should not remain the sole parties verifying wallet secret generation. Publisher reports indicate that these allegations are not officially confirmed by comprehensive first-party forensic audits across every impacted victim wallet.
crypto.news via LBankColdcard exploit sparks call for independent audits: Kraken CSO
According to reporting by LBank News based on crypto.news coverage, Kraken’s chief security officer has urged independent testing of hardware wallet seed generation following a security flaw in Coldcard devices. Suspected attacks have drained nearly $90 million in Bitcoin, with Galaxy Research tracking over 5,200 potential victim addresses, though these figures have not officially confirmed by law enforcement or device manufacturers.
CoinDeskColdcard Wallet Exploit Triggers Unprecedented Inflows Back to Centralized Exchanges as Investors Re-evaluate Self-Custody
According to reporting by CoinDesk, a major security vulnerability affecting Coldcard hardware wallets has prompted smaller bitcoin holders to move funds back onto centralized exchanges for safety. This behavioral shift contrasts sharply with the massive self-custody withdrawals seen following the FTX collapse in late 2022. These claims remain not officially confirmed by all impacted device manufacturers.
decrypt.co via LBankColdcard Bitcoin Exploit Balloons to $88 Million as Attackers Keep Draining Wallets
According to reporting by LBank News and Galaxy Research, a third wave of thefts targeting Coldcard Bitcoin wallets has pushed observed losses to approximately 1,367 Bitcoin across 4,585 addresses, though these figures remain not officially confirmed by regulatory authorities.
crypto.news via LBankColdcard Bitcoin Losses Rise to $88.6 Million in Third Reported Wave
According to LBank News citing reporting from crypto.news, Galaxy Research estimated that approximately 1,367.05 BTC has been drained across 4,585 addresses in three suspected attack waves linked to a Coldcard firmware vulnerability. The initial wave on July 30 removed 1,082.65 BTC from 1,196 addresses in a short duration. Published findings indicate that while software updates patch future key generation, existing vulnerable seeds cannot be repaired automatically and remain at risk unless migrated. These figures and attack attribution remain not officially confirmed by a first-party forensic audit.
crypto.news via LBankMinnesota Crypto ATM Ban Takes Effect Following Reported Fraud Losses
According to media reporting from LBank News and crypto.news, Minnesota enacted a statewide prohibition on virtual currency kiosks effective August 1, 2026, following fraud complaints involving nearly $1 million. The measure requires machines to halt transactions immediately and mandates complete physical removal by December 31, 2026. This development has not officially confirmed by every single federal authority, though state departments have verified local enforcement protocols.