Galaxy

DeFi

Reddit

Castle

At least 15 different attackers have exploited the Coldcard vulnerability, according to Galaxy Digital’s head of research, Alex Thorn, citing new victim reports received since the incident.Thorn <a href="https://x.com/intangiblecoins/status/2084584185528746434" rel="noopener noreferrer nofollow">said</a> Tuesday that the victim reports helped the company label new attackers that would have gone undiscovered, as the nature of the exploit was different from a hack on a centralized exchange.&nbsp;“Due to one single victim’s report of less than 1 BTC stolen, we identified a new attack with 12 BTC siphoned from 126 addresses,” Thorn wrote in a Tuesday X post.The estimated losses from the <a href="https://cointelegraph.com/news/coldcard-bitcoin-theft-100-million-three-waves" rel="noopener noreferrer nofollow">Coldcard exploit have grown</a> to $100 million across three confirmed attack waves, according to Galaxy Research. The company also identified a <a href="https://cointelegraph.com/news/suspected-4th-coldcard-attack-wave-sweeps-389-bitcoin-galaxys-thorn" rel="noopener noreferrer nofollow">suspected fourth wave</a> that could bring total losses to about $130 million in Bitcoin (BTC).The ongoing attack reignited debate about the security of cold storage wallets and whether users are safer by holding their own Bitcoin.&nbsp;<h2 id="2-worth-of-ai-hardening-could-have-prevented-the-exploit-dragonfly-partner">$2 worth of AI hardening could have prevented the exploit: Dragonfly partner</h2>Roughly “$2 of AI hardening” could have prevented the Coldcard exploit, <a href="https://x.com/hosseeb/status/2084327870961508408" rel="noopener noreferrer nofollow">wrote</a> Dragonfly managing partner Haseeb Qureshi, citing social media reports that some AI models rediscovered the vulnerability that led to the attack in less than 20 minutes.Qureshi’s remarks came in response to multiple social media users claiming that Claude was able to regenerate the vulnerability in just eight minutes. He argued that these results may have been contaminated by web search and added that open-source AI model GLM 5.2 was able to rediscover the attack in 20 minutes with web access turned off.However, it is unlikely that AI models would have independently discovered this vulnerability before it was made public, crypto analytics platform Tokenomist’s data lead, Tatsapat Saerejittima, told Cointelegraph. He said:<blockquote> “The claim that AI found it in 2 mins came from a pseudonymous Reddit user who scanned the code after the vulnerability had already become public. There was no blind test, no documented methodology, and no assessment of the model’s false-positive rate.”&nbsp;
</blockquote>Related: <a href="https://cointelegraph.com/news/dragonfly-defi-ai-hackpocalypse-fears" rel="noopener noreferrer nofollow">AI has not triggered DeFi ‘hackpocalypse,’ Dragonfly partner says</a><h2 id="vulnerability-seen-in-private-key-setup">Vulnerability seen in private key setup</h2>Crypto research company Castle Labs’ co-founder, Francesco, said that the growing capabilities of AI models are drastically reducing the cost and time it takes to discover new cryptocurrency vulnerabilities, but added that Coldcard’s private key may have played a role in the vulnerability.Coldcard used a “level of private key entropy (40 bits) much lower than the standard adopted by other wallets (a 12-word seed is 128 bits), a result of a firmware bug, making the job easier,” he told Cointelegraph.Francesco, who asked that Cointelegraph not use his last name, said he expects the cost of bug discovery to continue decreasing as AI models gain more capabilities and become more prominent in both cybersecurity and exploits.Magazine: <a href="https://cointelegraph.com/features/does-botanixs-failure-prove-bitcoiners-dont-care-about-defi" rel="noopener noreferrer nofollow">Does Botanix’s failure prove Bitcoiners don’t care about DeFi?</a>&nbsp;

At least 15 attackers exploited Coldcard vulnerability: Galaxy

Table of Contents

Cointelegraph

Other articles published on Aug 4, 2026

Solana's 10x burn proposal just cleared its first hurdle

Bybit adds an Austrian payments licence to its European stack

Russia legalizes crypto trading with a 98% catch

Cloudflare is building stablecoin wallets for AI agents

Upbit And Bithumb Listings Send HOME And META Soaring

Is This The End For Doge?

Join our free newsletter for daily crypto updates!