Bitcoin Losses from Coldcard Vulnerability Surpass $70 Million

Nearly 1,200 Bitcoin addresses have been drained of over 1,000 BTC, worth roughly $70 million, due to a vulnerability in Coldcard hardware wallets. Galaxy Research has identified this as one of the largest Bitcoin thefts linked to a hardware flaw, highlighting the risks associated with physical wallet security.

## What is the Coldcard vulnerability? The Coldcard vulnerability allows attackers to exploit a flaw in the hardware wallet's firmware, enabling them to drain Bitcoin from affected wallets. Coldcard, a popular hardware wallet known for its security features, has reportedly issued a patch to address this issue. Users are advised to update their devices immediately to prevent further losses.

## How does this compare to other Bitcoin thefts? This incident is notable for its scale and the specific method of exploitation. While Bitcoin thefts are not uncommon, this particular vulnerability targets a hardware wallet, which is generally considered more secure than software wallets. The $70 million loss is significant but pales in comparison to some of the largest Bitcoin heists, such as the $4.5 billion Mt. Gox hack in 2014. However, it underscores the importance of regular updates and security practices for hardware wallet users.

## What should Bitcoin holders do? If you own a Coldcard hardware wallet, the first step is to ensure your device is updated to the latest firmware version. Additionally, consider transferring your Bitcoin to a new, secure wallet as a precautionary measure. Always enable two-factor authentication and use multi-signature wallets for added security. Stay informed about potential vulnerabilities and updates from your wallet manufacturer.