cryptd.in

另类 LinkedIn 适合加密人才

Coldcard Wallet Attacks Enter Fourth Wave, Putting 449 BTC at Risk

-

由

cryptd.in
于

A suspected fourth wave of attacks targeting vulnerable Coldcard-generated Bitcoin wallets may already be underway, with blockchain researcher Alex Thorn warning on August 3 that almost 449 BTC had been swept from hundreds of addresses in about two and a half hours.

The latest activity, which was still unfolding as Thorn posted, follows three earlier waves that researchers have linked to the same weak-entropy vulnerability affecting certain Coldcard firmware versions.

New Sweeps Continue

Thorn said his latest analysis had identified 218 transactions affecting 462 suspected victim addresses between Bitcoin blocks 960778 and 969792. The transactions moved 388.93 BTC, valued at about $24.4 million at current rates, into 216 destination addresses, almost all of which had been just created and had no past transaction history.

“These are LIKELY Coldcard victims — they match the shape of coldcard vulnerable utxos and the elevated transaction pattern gives me high confidence they are another wave of attack,” he wrote.

The analyst stressed that he had no direct confirmation from victims yet, which is why he had deliberately used “likely” out of caution. He also quickly corrected the destination list, removing six addresses, which he said had already been receiving and spending BTC way before the Coldcard incident started on July 30. The six accounted for just over 5 BTC of the figure previously calculated.

Furthermore, Thorn stripped out 89 multisig addresses from his list, since none had appeared in the first three waves, taking the surviving core to 709 addresses and 448.73 ($28.1 million) across both confirmed and still-pending transactions.

He urged users to immediately move their funds off affected Coldcard devices and use higher transaction fees, and also warned that some of the pending transactions had Replace-by-Fee, or RBF, enabled, meaning that victims whose transactions were still sitting in the mempool might have a very brief chance to outbid the attacker and reclaim their funds before confirmation.

Earlier Waves Still Unspent

Galaxy Research has estimated that the first three confirmed waves drained 1,367 BTC, valued at around $85.7 million, from 4,585 Bitcoin addresses. According to the firm, those funds have not been spent and are still in attacker-controlled wallets, suggesting a coordinated operation rather than opportunistic theft.

However, not every stolen BTC has stayed put. One victim holding close to 30 BTC had 17 of them routed through ThorChain into the Duel online casino, which reportedly told the victim to file a police report before it could consider a freeze.

The attack stems from a vulnerability affecting seeds generated on certain Coldcard firmware versions released after March 2021. Coinkite, the maker of the Coldcard wallet, confirmed that seeds created on affected Mk3, Mk4, Mk5 and Q devices are exposed, and although newer patched firmware has stopped the problem for future seeds, it cannot secure old ones. It also said that it has destroyed all remaining vulnerable inventory, halted shipments, and is working with customers and law enforcement as they try to identify those responsible for the theft.

In addition, the firm advised users to immediately migrate to a new seed on an unaffected device, with Thorn pointing out that every single-signature Coldcard address generated under the vulnerable conditions will eventually get drained.

职位 Coldcard Wallet Attacks Enter Fourth Wave, Putting 449 BTC at Risk 首次出现在 加密土豆.

评论

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注

最新信息

热门类别

zh_CN 简体中文
zh_CN 简体中文 en_US English ro_RO Română et Eesti ko_KR 한국어 ja 日本語 ru_RU Русский de_DE Deutsch es_ES Español fr_FR Français zh_TW 繁體中文 pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български cs_CZ Čeština fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

搜索网站

热门故事

标签

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (457) #BitcoinETF (3) #itcoinFundamentals (1) # 比特币处理 (1) # 比特币价格 (5) # 比特币价格水平 (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #itcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTC 收购 (1) 1TP5 看涨预测 (1) #BullishSentiment (1) #C 中国矿业 (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #ogecoinGains (1) #ogecoinVolume (1) #DutchCourt (2) #ECommerce (1) #El萨尔瓦多比特币 (1) #E以太坊 (74) #EthereumPain (1) #E以太坊价格 (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #F 财务影响 (1) #F 财务隐私 (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investment (1) #InvestmentLoss (1) #JapaneseFirm (1) #L LegalAction (1) #L 法律影响 (1) #Legislation (1) #LightningNetwork (1) #M 市场分析 (3) #M 市场监测 (1) #M 市场预测 (1) #M 市场预测 (1) #M 市场投影 (1) #M 市场支持 (1) #M 市场波动性 (1) #M 婚姻 (1) #MemeCoin (5) #MemeCoins (2) #Miner 盈利能力 (1) #M 洗钱 (2) #MtGox (4) #朝鲜加密货币 (1) #诺沃格拉茨预测 (1) 1TP5价格里程碑 (1) #P 价格预测 (2) 1TP5价格问题 (1) #PriceSurge (1) #PrisonSentence (1) # 量化分析 (1) #R 监管压力 (1) #SECA Anti-Crypto (1) #ShibaInu (6) #SocialBuzz (1) #T 技术分析 (1) #Toncoin (3) #T 龙卷风现金 (3) #T 龙卷风现金发展项目 (1) #T 龙卷风现金开发者 (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

实用链接

我发现了一些有用的链接，希望与大家分享。