Coldcard Hacker Steals 97.09 BTC, Worth $7.7M, from Third Vault

iconKuCoinFlash
Share
AI summary iconSummary
Today’s BTC news reveals that on September 8 (UTC+8), the Coldcard hacker is prioritizing the withdrawal of the largest portion of the third vault. Galaxy Research reported that 97.09 BTC, or $7.7 million, has been moved—accounting for approximately 45% of the assets. The attacker created 293 2/2 vaults, transferred tokens via THORChain on September 2, and executed multiple CoinJoin transactions over the weekend. The vulnerability stems from a 2021 firmware issue that reduced seed entropy to 40 bits. Approximately 82% of the stolen BTC remains unspent.

ME News reports that on September 8 (UTC+8), according to Bitcoin News monitoring, the Coldcard thief is prioritizing the liquidation of the largest portion of the third wave of vaults. Galaxy Research stated that 97.09 BTC, valued at approximately $7.7 million, have been moved from these wallets—accounting for about 45% of the assets in this batch. The attacker created 293 self-managed 2/2 vaults, transferred some tokens via THORChain on September 2, and subsequently conducted multiple rounds of CoinJoin over the weekend. The vulnerability stems from a firmware flaw in 2021 that reduced seed entropy to as low as 40 bits. Approximately 82% of the stolen tokens from this exploit have not yet been moved. (Source: ODAILY)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.