
The Coldcard hardware wallet exploit has escalated to an estimated $114 million in losses after hitting over 5,200 Bitcoin addresses across four distinct automated attack waves. The security breach stems from a critical firmware vulnerability introduced during a March 2021 cryptographic library migration. This flaw bypassed the device's secure hardware entropy and relied on a predictable, weak software-based random number generator (RNG).
