A series of serious security attacks are targeting Coldcard, one of the most popular hardware wallet brands among Bitcoin maximalists.

According to foreign media reports, the cumulative damage in Bitcoin from attacks exploiting this Random Number Generator (RNG) vulnerability has already exceeded $100 million. Galaxy Research has analyzed that, in the worst-case scenario, the damage could reach up to $130 million. A fourth wave of attacks has been detected, and the manufacturer, Coinkite, is urgently releasing firmware updates to patch the vulnerability.

The fact that even a 100% offline cold wallet, trusted as the safest option, has been compromised is sending shockwaves through the security industry. With the limitations of 'self-custody'—where individuals manage their own assets—being highlighted by this incident, it seems likely that we may see an acceleration in the shift toward institutional custody services.

If you know anyone using a Coldcard, please make sure to tell them to check the official website for the latest updates! Extra caution is advised until the firmware is updated. 😄

Related Links