Vulnerabilidade na Coldcard Wallet leva a perdas de mais de US$ 88 milhões em BTC

Odaily Planet Daily News: A vulnerability in seed generation randomness has been identified in Coinkite’s Coldcard series of hardware wallets, resulting in threat actors stealing over 1,000 BTC in the past two days. According to Galaxy Research data, as of 17:36 Eastern Time on Saturday, the incident involved 1,367 BTC, with losses exceeding $88 million. To notify potentially affected users, Coinkite sent security alerts to email addresses retained through its store and newsletter system since 2019. Coldcard confirmed that the related emails originated from Coinkite and stated that all reachable addresses have been contacted to the best of their ability. Coinkite has faced criticism for retaining customer email data. The company stated that its public policy indicates that purchase email addresses are retained to allow customers to log in and check other information, which has been cleared, but it did not specify a deletion schedule, claiming these addresses will be retained “temporarily.” Coinkite’s co-founder and CEO, Rodolfo Novak, previously stated that the company does not store customer information and deletes customer data 90 days after purchase, offering an anonymous purchasing option.