Coldcard Hardware Wallet Exploit Drains $38 Million in 25-Minute Attack

A flaw in Coldcard hardware wallets' key generation process enabled theft of 584 Bitcoin (~$38 million) from 500 wallets in 25 minutes, per security researchers. Web3 builders should note: hardware wallet security is table stakes; key derivation flaws are existential and spread reputationally across ecosystems. Audit cryptography ruthlessly before release.

Source: Gadgets 360 ↗