cryptd.in

Alternativní LinkedIn pro talenty přátelské ke kryptoměnám

Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report

-

podle

cryptd.in
na adrese

Bitcoin Magazine

Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report

Since over $70 million in Bitcoin was stolen yesterday by an attack that exploited a fault in the Coldcard’s system, it has been reported that the thief used a top blockchain services provider for help. 

Writing on X Friday, engineer at payments company Block, Clay Garrett, řekl that the provider — who he did not name at the request of the services provider — had been contacted after finding blockchain movements matched the “suspected workflow” of the attacker. 

“During our investigation of the Coldcard drain yesterday, we identified an unusual pattern in the sweeps,” Garrett said. 

“That pattern led us to a hypothesis that has since been confirmed: the operator used a paid account at a well-known blockchain-services provider to query the source addresses and perform other related activity during the sweeps,” Garrett continued, adding that the authorities had been notified. 

Galaxy Digital’s research arm also wrote on X that the thief had an unusual pattern of moving the coins. 

“The pattern tells us these were all the same attacker — it does not capture the attack itself, which looks the same as if a coin owner chose to move coins,” the company řekl, adding that Bitcoiners should move funds out of single-signature Coldcard addresses and into secure custody.

After over $35 million in Bitcoin was drained from wallets on Thursday, Coinkite said that a firmware bug in Coldcard Mk3 devices — starting with version 4.0.1 in March 2021 — caused seed generation to fall back to a weak software Pseudorandom Number Generator instead of the hardware true random number generator. 

This allowed private keys for many single-signature wallets (especially those created without dice rolls or a strong BIP-39 passphrase) predictable enough for attackers to brute-force.

Later on Friday, Coinkite admitted all of its models were vulnerable following more thefts. Over $70 million has so far been swiped and engineers have warned that more Bitcoin addresses could be at risk. 

The company makes a number of Bitcoin products, including cold storage hardware wallets.

This post Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

Komentáře

Napsat komentář

Vaše e-mailová adresa nebude zveřejněna. Vyžadované informace jsou označeny *

Nejnovější kanály

Oblíbené kategorie

cs_CZ Čeština
cs_CZ Čeština en_US English ro_RO Română et Eesti ko_KR 한국어 ja 日本語 ru_RU Русский de_DE Deutsch es_ES Español zh_CN 简体中文 fr_FR Français zh_TW 繁體中文 pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

Vyhledávání na webových stránkách

Populární příběhy

Štítky

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (456) #BitcoinETF (3) #BitcoinFundamentals (1) #BitcoinHandling (1) #BitcoinPrice (5) #BitcoinPriceLevel (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #BitcoinTop (1) #Bitfinex (1) #BPodrobněji (1) #BracebridgeCapital (1) #BRC20Tokeny (1) #BTCakvizice (1) #BullishPrediction (1) #BullishSentiment (1) #ChineseMining (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #DogecoinGains (1) #DogecoinVolume (1) 1TP5DutchCourt (2) #ECommerce (1) #ElSalvadorBitcoin (1) #Ethereum (74) #EthereumPain (1) #EthereumPrice (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #Finanční dopady (1) #Finanční ochrana osobních údajů (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investice (1) #InvesticeZtráty (1) #JapaneseFirm (1) #LegalAction (1) #Právní dopad (1) #Legislativa (1) #LightningNetwork (1) #M Analýza trhu (3) #MMarketMonitoring (1) #MPředpověď trhu (1) #MPředpovědi trhu (1) #M tržní projekce (1) #M Podpora trhu (1) #MVolatilita trhu (1) #M Sňatek (1) #MemeCoin (5) #MemeCoins (2) #MinerProfitability (1) #M Praní peněz (2) #MtGox (4) #NorthKoreaCrypto (1) #NovogratzPředpověď (1) #PriceMilestone (1) #PricePrediction (2) #PriceQuestion (1) #PriceSurge (1) #PrisonSentence (1) #QuantAnalysis (1) #Regulační tlak (1) #SECAntiCrypto (1) #ShibaInu (6) #SocialBuzz (1) #Technická analýza (1) #Toncoin (3) #TornadoCash (3) #TornadoCashDev (1) #TornadoCashDeveloper (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XR Cena (1) #XRPupswing (1)

Užitečné odkazy

Odkazy, které jsem našel užitečné a chtěl jsem se o ně podělit.