Coldcard Bitcoin Hack Could Lead to $114 Million in Losses

Recent security breaches have put Coldcard, a prominent hardware wallet for Bitcoin, in the spotlight as losses from a significant hack have surged to over $89 million. The incident, which has been labeled one of the largest thefts in the realm of self-custody, was traced back to a vulnerability in the wallet's firmware. Attackers exploited a flaw that allowed them to regenerate users' private keys without the need to access the physical device itself.

The breach is attributed to a firmware update from March 2021 that utilized a weak software fallback. This change compromised the security of Mk3 keys, reducing their strength from the intended 128 bits to approximately 40 bits, facilitating easier guessing of these keys and enabling the theft of funds that had been untouched for years. One affected user from Canada reported a loss of 18.25 BTC, expressing disappointment over following all recommended security measures.

Initially, losses were estimated at $38 million, but as investigations progressed, Galaxy Research now estimates that around 1,367 BTC, valued at approximately $88.6 million, have been stolen across 4,585 addresses in multiple waves. A potential fourth wave of attacks has been warned about, with the total losses possibly reaching $114 million. Galaxy has alerted authorities about approximately 600 addresses suspected of being linked to the attackers.

Coinkite, the maker of Coldcard, acknowledged that the attackers likely utilized AI to identify the vulnerability in its open-source firmware, admitting that their own AI assessments failed to detect the flaw. Alex Thorn, head of research at Galaxy, noted that the systematic nature of the attacks suggested they were likely orchestrated using advanced language models, highlighting a shift in the balance of power between attackers and defenders in the crypto space.

This incident underscores a growing concern regarding the role of AI in cybersecurity, as it has emerged as a formidable threat within the cryptocurrency sector. With self-storage, a principle that enables individuals to control their wealth, now facing serious challenges, the implications of this hack extend beyond immediate financial losses.