🚨 One of the biggest hardware wallet security failures in Bitcoin history. More than 1,000 BTC has reportedly been stolen after attackers exploited a years-old firmware vulnerability affecting Coldcard Mk3 wallets. Here’s what allegedly happened: • Around 594 BTC ($38M) was drained from nearly 500 air-gapped wallets in just 25 minutes. • Investigators believe another 488 BTC had been stolen earlier using the same exploit, bringing total losses to over 1,000 BTC. • The attacker didn’t physically compromise a single wallet. The issue reportedly traces back to a 2021 firmware bug that weakened seed generation by failing to properly use the device’s hardware randomness. As a result, seed phrases could become far more predictable than intended. According to the report, the attacker generated the affected private keys in advance, waited years for wallets to accumulate funds, and then emptied them. If you own a Coldcard Mk3: Move your funds immediately if your wallet may have been created with affected firmware. Wallets protected with an additional BIP39 passphrase or dice-generated entropy are reportedly not affected. Coldcard Mk4, Mk5, Q, Ledger, and Trezor are also not believed to be impacted by this specific issue. Be cautious of fake “support” accounts and phishing attempts, they often appear after incidents like this. The incident is a reminder that even air-gapped wallets depend on secure key generation. A hardware wallet is only as secure as the randomness used to create its seed. #Bitcoin #BTC #Crypto #CryptoNews #HardwareWallet #CyberSecurity #Coldcard #Blockchain