ChainCatcher report: Bitcoin News posted on X stating that new community honeypot tests show attackers are still prioritizing wallets most vulnerable to the Coldcard Mk3 RNG vulnerability. Researcher @ColeTU injected funds into five affected Mk3 wallets: one using only the vulnerable mnemonic, three protected by BIP39 passphrases of 1, 2, and 3 words respectively, and one using a random account number. After 14 hours, only the unprotected wallet—using the mnemonic alone—had its funds drained. According to @jamesob’s real-time tripwire dashboard, only 2 out of 17 honeypot wallets have been emptied so far. All confirmed emptied wallets lacked additional entropy, while all wallets protected by dice rolls, passphrases, multisig, or other complexities remain untouched. The test results indicate attackers are currently focusing exclusively on the easiest wallets to brute-force, rather than investing resources in hardened targets; however, affected users should still immediately migrate their funds rather than rely on temporary protections.
Coldcard Mk3 Honey Pot Test Reveals Attackers Target the Most Vulnerable Wallets
ChaincatcherShare
Summary
A recent Coldcard Mk3 honeypot test reveals that attackers continue targeting wallets with RNG vulnerabilities. A researcher funded five wallets: one containing only vulnerable mnemonics, three with 1-, 2-, and 3-word BIP39 passphrases, and one with a random account number. Within 14 hours, only the wallet with no additional entropy was drained. Real-time data shows that only two of 17 honeypots were emptied—all lacking additional security. As new token listings increase, users are urged to move their funds promptly. Security remains critical, especially amid growing news around real-world assets (RWA). Wallets protected by passphrases or multisig remain untouched.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.