Over $30 million stolen in 10 minutes due to Coldcard vulnerability exploit

iconChaincatcher
Share
This is the logo of the coin.
BTC
$63,606.10-0.66%
This is the logo of the coin.
ETH
$1,887.91-1.02%
This is the logo of the coin.
XRP
$1.00-1.07%
This is the logo of the coin.
SOL
$75.94-0.73%
This is the logo of the coin.
DOGE
$0.07016-1.98%
AI summary iconSummary
A recent vulnerability incident resulted in over $38 million being stolen from Coldcard wallets in under 25 minutes, with $30 million taken within the first 10 minutes. Chainalysis reported that attackers targeted high-value wallets, including one containing $1.8 million. Investigators found that the hackers used a paid account from a major blockchain service provider to track victims, though no evidence of collusion was discovered. The breach underscores the risks associated with DeFi exploit events; authorities have been notified and are reviewing the case.

ChainCatcher report, according to Bitcoin News monitoring, Chainalysis analysis of the Coldcard exploit event involving over $38 million shows that attackers deliberately targeted the highest-value wallets first, including one holding $1.8 million, indicating that victims were profiled before asset transfers began. Approximately $30 million was stolen within the first 10 minutes, followed by around 500 wallets being emptied within the next 25 minutes. Block’s Clay Garrett stated that investigators also confirmed the attackers used a paid account from a well-known blockchain service provider to query victim addresses during the operation. The service provider’s internal logs matched the timing and sequence of requests, but Block noted no evidence that the company was aware of or assisted in the theft. Relevant information has been shared with authorities.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.