Galaxy

Safe

random

FIRST

<ul>
 <li><strong>Galaxy Research confirms 1,596 BTC stolen and warns the total may reach 2,055 BTC.</strong></li>
 <li><strong>At least 15 separate attackers are now draining vulnerable wallets.</strong></li>
 <li><strong>Updating firmware does not fix a seed that was already created weakly.</strong></li>
</ul>
<p>A firmware flaw in Coldcard hardware wallets has let attackers reconstruct the private keys of thousands of Bitcoin holders and empty their wallets, with Galaxy Research counting confirmed thefts of 1,596 BTC from roughly 7,300 addresses and <strong><a href="https://twitter.com/glxyresearch/status/2084411915745595527" rel="noopener noreferrer nofollow">warning the figure could climb to 2,055 BTC</a></strong>, close to $130 million, if a suspected fourth wave is verified. The manufacturer, Canadian firm Coinkite, traced the problem to seed generation that <strong><a href="https://blog.coinkite.com/entropy-technical-backgrounder/" rel="noopener noreferrer nofollow">quietly drew on weak randomness since March 2021</a></strong>. The first sweeps hit on July 30, and as of August 4 the theft is still running.</p>
<h2 id="strong-how-thousands-of-secure-seeds-became-guessable-strong"><strong>How thousands of “secure” seeds became guessable</strong></h2>
<p>Coldcard devices ship with a dedicated hardware true random number generator built into their STM32 chip, and that hardware-isolated key generation was a core part of the sales pitch. During seed creation, affected firmware never used it. A code path inside a library called libngu fell back to a software pseudo-random number generator named Yasmarang, and <strong><a href="https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware" rel="noopener noreferrer nofollow">a preprocessor guard checked only whether a setting was defined</a></strong> rather than testing its value, so every build compiled against the fallback without raising a single warning.</p>
<p>The result was a private key drawn from a tiny, predictable pool. Instead of the 128 bits of entropy a standard seed should carry, Mk3 seeds effectively held around 40 bits, while the Mk4, Mk5 and Q recovered some randomness from their secure elements and landed near 72 bits. The Bitcoin Policy Institute put the gap in physical terms: a properly generated key sits somewhere among a set of possibilities so vast that finding it is like<strong><a href="https://twitter.com/bitcoinpolicy/status/2084337559346548988" rel="noopener noreferrer nofollow"> hunting one specific atom across two billion galaxies</a></strong>, whereas the affected Coldcard keyspace shrinks to roughly the number of atoms in a large virus, small enough for an ordinary computer to walk through in a few hours.</p>
<div style="display: flex; flex-wrap: wrap; gap: 14px; margin: 22px 0;">
 <div style="flex: 1 1 240px; background: linear-gradient(160deg,#12233d,#1c3a5e); border-radius: 12px; padding: 18px 20px; color: #e8eef7; box-shadow: 0 4px 14px rgba(15,32,56,.25);">
  <div style="display: flex; justify-content: space-between; align-items: baseline;"><span style="font-size: 17px; font-weight: bold;">Mk3</span><br><span style="font-size: 12px; background: #7a1f1f; color: #ffd7d7; padding: 3px 9px; border-radius: 20px;">Affected</span>
  </div>
  <div style="margin: 14px 0 6px; font-size: 13px; color: #a9c0dc;">
   Effective entropy
  </div>
  <div style="background: #0a1626; border-radius: 8px; height: 26px; overflow: hidden; position: relative;">
   <div style="width: 31%; height: 100%; background: linear-gradient(90deg,#e03b3b,#f7931a); border-radius: 8px 0 0 8px;"></div>
   <p><span style="position: absolute; top: 3px; right: 10px; font-size: 13px; font-weight: bold;">~40 / 128 bits</span></p>
  </div>
 </div>
 <div style="flex: 1 1 240px; background: linear-gradient(160deg,#12233d,#1c3a5e); border-radius: 12px; padding: 18px 20px; color: #e8eef7; box-shadow: 0 4px 14px rgba(15,32,56,.25);">
  <div style="display: flex; justify-content: space-between; align-items: baseline;"><span style="font-size: 17px; font-weight: bold;">Mk4 &nbsp;·&nbsp; Mk5 &nbsp;·&nbsp; Q</span><br><span style="font-size: 12px; background: #7a1f1f; color: #ffd7d7; padding: 3px 9px; border-radius: 20px;">Affected</span>
  </div>
  <div style="margin: 14px 0 6px; font-size: 13px; color: #a9c0dc;">
   Effective entropy
  </div>
  <div style="background: #0a1626; border-radius: 8px; height: 26px; overflow: hidden; position: relative;">
   <div style="width: 56%; height: 100%; background: linear-gradient(90deg,#d98c1f,#f7931a); border-radius: 8px 0 0 8px;"></div>
   <p><span style="position: absolute; top: 3px; right: 10px; font-size: 13px; font-weight: bold;">~72 / 128 bits</span></p>
  </div>
 </div>
 <div style="flex: 1 1 240px; background: linear-gradient(160deg,#123d2a,#1c5e3f); border-radius: 12px; padding: 18px 20px; color: #e8f7ee; box-shadow: 0 4px 14px rgba(15,56,40,.25);">
  <div style="display: flex; justify-content: space-between; align-items: baseline;"><span style="font-size: 17px; font-weight: bold;">Tapsigner · Opendime · Satscard</span><br><span style="font-size: 12px; background: #1f7a3f; color: #d7ffe4; padding: 3px 9px; border-radius: 20px;">Safe</span>
  </div>
  <div style="margin: 14px 0 6px; font-size: 13px; color: #a9dcbe;">
   Effective entropy
  </div>
  <div style="background: #0a2617; border-radius: 8px; height: 26px; overflow: hidden; position: relative;">
   <div style="width: 100%; height: 100%; background: linear-gradient(90deg,#2fae5f,#3fd070); border-radius: 8px;"></div>
   <p><span style="position: absolute; top: 3px; right: 10px; font-size: 13px; font-weight: bold; color: #0a2617;">128 / 128 bits</span></p>
  </div>
 </div>
</div>
<h2 id="strong-from-one-coordinated-sweep-to-a-swarm-of-attackers-strong"><strong>From one coordinated sweep to a swarm of attackers</strong></h2>
<p>The incident surfaced when about 594 BTC left roughly 500 single-signature wallets inside a 25-minute window early on July 30, hours before Coinkite published its first advisory. Galaxy Research then mapped the same morning more fully and put the first-day total at 1,082.65 BTC across 1,196 addresses, well above that opening estimate, before fresh waves pushed the count higher. What began as a single operator has splintered. Alex Thorn, who leads research at Galaxy, said on August 4 that the firmware is now being worked by numerous independent parties, estimating at least 15 different attackers racing to claim wallets before anyone else does.</p>
<div style="margin: 26px 0;">
 <div style="display: flex; align-items: stretch;">
  <div style="width: 26px; flex: 0 0 26px; position: relative;">
   <div style="position: absolute; left: 11px; top: 0; bottom: 0; width: 3px; background: #f7931a;"></div>
   <div style="position: absolute; left: 5px; top: 4px; width: 16px; height: 16px; background: #f7931a; border: 3px solid #fff; border-radius: 50%; box-sizing: border-box;"></div>
  </div>
  <div style="padding: 0 0 22px 14px;">
   <div style="font-size: 13px; color: #f7931a; font-weight: bold; letter-spacing: .5px;">
    JUL 30 · FIRST SWEEP
   </div>
   <div style="font-size: 18px; font-weight: bold; color: #0f2038; margin: 2px 0;">
    1,082.65 BTC &nbsp;<span style="color: #6b7c90; font-weight: 600; font-size: 15px;">~$70.2M</span>
   </div>
   <div style="font-size: 13px; color: #6b7c90;">
    1,196 addresses drained in a single 41-minute window
   </div>
  </div>
 </div>
 <div style="display: flex; align-items: stretch;">
  <div style="width: 26px; flex: 0 0 26px; position: relative;">
   <div style="position: absolute; left: 11px; top: 0; bottom: 0; width: 3px; background: #f7931a;"></div>
   <div style="position: absolute; left: 5px; top: 4px; width: 16px; height: 16px; background: #f7931a; border: 3px solid #fff; border-radius: 50%; box-sizing: border-box;"></div>
  </div>
  <div style="padding: 0 0 22px 14px;">
   <div style="font-size: 13px; color: #f7931a; font-weight: bold; letter-spacing: .5px;">
    AUG 1 · SECOND WAVE
   </div>
   <div style="font-size: 18px; font-weight: bold; color: #0f2038; margin: 2px 0;">
    1,158.66 BTC &nbsp;<span style="color: #6b7c90; font-weight: 600; font-size: 15px;">~$75.1M</span>
   </div>
   <div style="font-size: 13px; color: #6b7c90;">
    2,673 addresses affected
   </div>
  </div>
 </div>
 <div style="display: flex; align-items: stretch;">
  <div style="width: 26px; flex: 0 0 26px; position: relative;">
   <div style="position: absolute; left: 11px; top: 0; bottom: 0; width: 3px; background: #f7931a;"></div>
   <div style="position: absolute; left: 5px; top: 4px; width: 16px; height: 16px; background: #f7931a; border: 3px solid #fff; border-radius: 50%; box-sizing: border-box;"></div>
  </div>
  <div style="padding: 0 0 22px 14px;">
   <div style="font-size: 13px; color: #f7931a; font-weight: bold; letter-spacing: .5px;">
    AUG 2 · THIRD WAVE
   </div>
   <div style="font-size: 18px; font-weight: bold; color: #0f2038; margin: 2px 0;">
    ~1,367 BTC &nbsp;<span style="color: #6b7c90; font-weight: 600; font-size: 15px;">~$88M</span>
   </div>
   <div style="font-size: 13px; color: #6b7c90;">
    4,585 addresses affected
   </div>
  </div>
 </div>
 <div style="display: flex; align-items: stretch;">
  <div style="width: 26px; flex: 0 0 26px; position: relative;">
   <div style="position: absolute; left: 11px; top: 0; bottom: 0; width: 3px; background: #f7931a;"></div>
   <div style="position: absolute; left: 3px; top: 4px; width: 20px; height: 20px; background: #0f2038; border: 3px solid #fff; border-radius: 50%; box-sizing: border-box;"></div>
  </div>
  <div style="padding: 0 0 22px 14px;">
   <div style="font-size: 13px; color: #0f2038; font-weight: bold; letter-spacing: .5px;">
    AUG 3 · CONFIRMED TOTAL
   </div>
   <div style="font-size: 18px; font-weight: bold; color: #0f2038; margin: 2px 0;">
    1,596 BTC &nbsp;<span style="color: #6b7c90; font-weight: 600; font-size: 15px;">&gt;$100M</span>
   </div>
   <div style="font-size: 13px; color: #6b7c90;">
    ~7,300 addresses across three waves plus 14 smaller incidents
   </div>
  </div>
 </div>
 <div style="display: flex; align-items: stretch;">
  <div style="width: 26px; flex: 0 0 26px; position: relative;">
   <div style="position: absolute; left: 11px; top: 0; height: 24px; width: 3px; background: #f7931a;"></div>
   <div style="position: absolute; left: 5px; top: 4px; width: 16px; height: 16px; background: #e03b3b; border: 3px solid #fff; border-radius: 50%; box-sizing: border-box;"></div>
  </div>
  <div style="padding: 0 0 0 14px;">
   <div style="font-size: 13px; color: #e03b3b; font-weight: bold; letter-spacing: .5px;">
    SUSPECTED 4TH WAVE
   </div>
   <div style="font-size: 18px; font-weight: bold; color: #0f2038; margin: 2px 0;">
    2,055 BTC &nbsp;<span style="color: #6b7c90; font-weight: 600; font-size: 15px;">~$130M</span>
   </div>
   <div style="font-size: 13px; color: #6b7c90;">
    7,700+ addresses if verified · awaiting victim confirmation
   </div>
  </div>
 </div>
</div>
<p>Around 90% of the stolen coins have not moved, which investigators read as attackers waiting out the attention before attempting to cash out. Galaxy has passed roughly 600 suspected attacker addresses to U.S. law enforcement, exchanges and cyber-investigation groups, and set up a $5 million fund to support the response.</p>
<h2 id="strong-why-a-firmware-update-alone-will-not-save-affected-users-strong"><strong>Why a firmware update alone will not save affected users</strong></h2>
<p>Coinkite has pushed emergency firmware for every affected model and says it destroyed its remaining vulnerable inventory, but patched firmware repairs future seeds, not past ones. A key generated with weak randomness stays weak even after it is restored onto a different brand of device, a point Trezor raised while reassuring its own customers. Anyone holding funds on an affected seed needs to generate a fresh seed on fixed firmware and move coins to it. Multisig setups offer no shelter if every device in the arrangement is a vulnerable Coldcard, since a quorum of secure devices is what actually protects the wallet. Holders who used a BIP-39 passphrase that was never typed into any computer face minimal risk from this specific flaw.</p>
<p>Coinkite also pushed back on reports that the current firmware permanently bricks devices. If the true-random-number-generator fault triggers, the company says the device fails closed with nothing written to flash, and a full power cycle restores it.</p>
<h2 id="strong-the-2-question-hanging-over-the-industry-strong"><strong>The $2 question hanging over the industry</strong></h2>
<p>Coinkite has said it must assume someone pointed AI at its open-source firmware to uncover the bug, and noted that its own AI review of the same code weeks earlier turned up nothing. A Reddit developer claimed Claude Code flagged the software-RNG fallback in about eight minutes. Dragonfly managing partner Haseeb Qureshi tested the idea more carefully and cautioned that the eight-minute result may have leaned on web search, while a separate offline run of GLM 5.2 reproduced the finding in roughly 20 minutes. His takeaway centered on price. That <strong><a href="https://x.com/MTSlive/status/2084402253147132385" rel="noopener noreferrer nofollow">20-minute run cost about $2</a></strong>, and Qureshi framed it through a “Cost of Discovery” metric measuring how cheaply a frontier model can surface a vulnerability. No evidence ties the actual thefts to AI, but the economics he described change who can afford to audit the code guarding large sums of money.</p>
<h2 id="strong-whales-are-buying-the-fear-while-retail-steps-back-strong"><strong>Whales are buying the fear while retail steps back</strong></h2>
<p>The fallout reached beyond the drained wallets. Santiment data shows Bitcoin wallets holding between 10 and 10,000 BTC <strong><a href="https://x.com/SantimentData/status/2084290509070041329" rel="noopener noreferrer nofollow">added 19,610 coins since July 29</a></strong>, while addresses holding under 0.01 BTC reduced their balances by 0.55% over the same stretch. That cohort spans the whole market rather than any single Coldcard address, so the split reads as larger holders absorbing coins that nervous smaller holders are letting go as confidence in hardware self-custody takes a hit. Whether that confidence returns depends less on the loss tally than on what happens to the roughly 90% of stolen Bitcoin still sitting untouched on-chain, and on whether the swarm of attackers exhausts the vulnerable keyspace before affected users finish migrating.</p>
<p>The post <a href="https://ethnews.com/coldcard-hack-losses-130m/" rel="noopener noreferrer nofollow">Coldcard Hack Losses Near $130M as Attackers Multiply</a> appeared first on <a href="https://ethnews.com" rel="noopener noreferrer nofollow">ETHNews</a>.</p>

Coldcard Hack Losses Near $130M as Attackers Multiply

Table of Contents

ETHNews

Other articles published on Aug 4, 2026

Join our free newsletter for daily crypto updates!