cryptd.in

LinkedIn alternativ pentru talentele cripto-friendly

Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report

-

de

cryptd.in
în

Bitcoin Magazine

Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report

Since over $70 million in Bitcoin was stolen yesterday by an attack that exploited a fault in the Coldcard’s system, it has been reported that the thief used a top blockchain services provider for help. 

Writing on X Friday, engineer at payments company Block, Clay Garrett, said that the provider — who he did not name at the request of the services provider — had been contacted after finding blockchain movements matched the “suspected workflow” of the attacker. 

“During our investigation of the Coldcard drain yesterday, we identified an unusual pattern in the sweeps,” Garrett said. 

“That pattern led us to a hypothesis that has since been confirmed: the operator used a paid account at a well-known blockchain-services provider to query the source addresses and perform other related activity during the sweeps,” Garrett continued, adding that the authorities had been notified. 

Galaxy Digital’s research arm also wrote on X that the thief had an unusual pattern of moving the coins. 

“The pattern tells us these were all the same attacker — it does not capture the attack itself, which looks the same as if a coin owner chose to move coins,” the company said, adding that Bitcoiners should move funds out of single-signature Coldcard addresses and into secure custody.

After over $35 million in Bitcoin was drained from wallets on Thursday, Coinkite said that a firmware bug in Coldcard Mk3 devices — starting with version 4.0.1 in March 2021 — caused seed generation to fall back to a weak software Pseudorandom Number Generator instead of the hardware true random number generator. 

This allowed private keys for many single-signature wallets (especially those created without dice rolls or a strong BIP-39 passphrase) predictable enough for attackers to brute-force.

Later on Friday, Coinkite admitted all of its models were vulnerable following more thefts. Over $70 million has so far been swiped and engineers have warned that more Bitcoin addresses could be at risk. 

The company makes a number of Bitcoin products, including cold storage hardware wallets.

This post Coldcard Bitcoin Thief Likely Used Top Blockchain Services Provider: Report first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

Comentarii

Lasă un răspuns

Adresa ta de email nu va fi publicată. Câmpurile obligatorii sunt marcate cu *

Ultimele fluxuri

Categorii populare

ro_RO Română
ro_RO Română en_US English et Eesti ko_KR 한국어 ja 日本語 ru_RU Русский de_DE Deutsch es_ES Español zh_CN 简体中文 fr_FR Français zh_TW 繁體中文 pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български cs_CZ Čeština fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

Căutați pe site

Povești populare

Etichete

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElecție (1) #BinanceVsCoinbase (1) #Bitcoin (458) #BitcoinETF (3) #BitcoinFundamente (1) #BitcoinHandling (1) #BitcoinPrice (5) #BitcoinPriceLevel (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #BitcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTCachiziție (1) #BullishPrediction (1) #BullishSentiment (1) #CincianăMiniere (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPrediciuni (1) #CryptoReglementare (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoIncertitudine (1) #DerivativeJump (1) #Dogecoin (74) #DogecoinGains (1) #DogecoinVolumele (1) #DutchCourt (2) #ECommerce (1) #ElSalvadorBitcoin (1) #Ethereum (74) #EthereumPain (1) #EthereumPrice (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #Fimpact financiar (1) #FinanciarPrivire privată (1) #FirmShutdown (1) #F Contul înghețat (1) #IllicitFunds (1) #InflationData (1) 1TP5Investiții (1) 1TP5Pierdere din investiții (1) #JaponezăFirmă (1) #Acțiune juridică (1) #Impact juridic (1) #Legislație (1) #LightningNetwork (1) #MAnaliză de piață (3) #MMonitorizare de piață (1) #MPredicție de piață (1) #MPrediciții de piață (1) #Mproiecție de piață (1) #MarketSupport (1) #MVolatilitatea pieței (1) #MCăsătorie (1) #MemeCoin (5) #MemeCoins (2) #MinerProfitabilitate (1) #MSpălare de bani (2) #MtGox (4) #N Coreea de NordCrypto (1) #NovogratzPredicție (1) #PriceMilestone (1) #PPrețPredicție (2) #Price Întrebare (1) #PriceSurge (1) #PrisonSentință (1) #QuantAnalysis (1) #ReglementarePresiune (1) #SECAntiCrypto (1) #ShibaInu (6) #SocialBuzz (1) #TAnaliză tehnică (1) #Toncoin (3) #TornadoCash (3) #TornadoCashDev (1) #TornadoCashDeveloper (1) #UKCrypto (1) #UpsidePotențial (1) #USCongresul (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

Link-uri utile

Link-uri pe care le-am găsit utile și pe care am dorit să le împărtășesc.