Bitcoin News
By Steven Anderson
1 / 15
What the Transaction Pattern Showed. Galaxy Research's analysis found some very specific fingerprints in the attack transactions.
2 / 15
Why the Hotfix Isn't Enough for Everyone. Novak was blunt about this: the update doesn't secure seeds that were already generated on the…
3 / 15
Investigation Still Open. Coinkite hasn't finished its investigation. The full scope of the incident is still undetermined,…
4 / 15
Galaxy Research, the research arm of crypto investment firm Galaxy Digital, tracked down 1,196 Coldcard wallet addresses that bled out 1,082.65 Bitcoin — roughly $70.
5 / 15
The Bitcoin movements happened between 1:10 AM and 1:51 AM UTC on July 30, spread across blocks 960,183 through 960,191.
6 / 15
Galaxy Research's analysis found some very specific fingerprints in the attack transactions. Uniform fees of 30 satoshis per virtual byte. No change outputs.
7 / 15
But here's the catch — Galaxy Research was clear that future attacks on Coldcard-generated addresses probably won't look the same.
8 / 15
Coinkite co-founder Rodolfo Novak didn't dodge responsibility. He acknowledged the firmware bug directly and said the company is taking ownership of the lapse.
9 / 15
That's the good news. The bad news is harder to fix.
10 / 15
Related: CoinFlip-Style Hardware Hack: $70 Million Gone From 1,196 Coldcard Wallets
11 / 15
Coinkite's guidance is straightforward. If you generated a seed on the affected firmware, move your funds to a new seed now. Don't wait for more details.
12 / 15
Hardware wallets have long been considered the gold standard for self-custody in crypto. The pitch has always been that keeping your keys offline, on a dedicated device, is safer…
13 / 15
The $70.2 million figure is a reminder of how concentrated losses can get in a short burst. Forty-one minutes. Roughly 1,200 wallets. The speed of it is almost hard to process.
14 / 15
Coinkite hasn't finished its investigation. The full scope of the incident is still undetermined, and the company hasn't released details on what additional protective measures…
15 / 15
More context: Coldcard Firmware Bug Drained Bitcoin Wallets Worth Nearly $70 Million
The Currency Analytics
Want the full story?