Coldcard cảnh báo nguy cơ tiềm ẩn đối với cụm từ hạt giống trong các ví Mk3, các chuyên gia bảo mật đang điều tra khoản chuyển BTC 38,3 triệu USD

The Huoxing Finance report states that Canadian hardware wallet manufacturer Coinkite has issued a security advisory, urging users who generated mnemonic phrases on Coldcard Mk3 devices with firmware versions 4.1 to 5.3 to migrate their assets as soon as possible. The company noted that preliminary analysis indicates wallets using BIP-39 passphrases are at lower risk, and Mk4, Q, and Mk5 devices are unaffected; the investigation is ongoing. Meanwhile, security researchers are investigating an unusual transfer involving 594.48 BTC (approximately $38.3 million). AnchorWatch CEO Rob Hamilton stated that the attacker transferred 1,324 UTXOs across 500 transactions within three blocks and speculated that the issue may stem from insufficient entropy during wallet generation. Wizardsardine CEO Kevin Loaec suggested the vulnerability could be related to a software library, secure chip, or a specific batch of devices or firmware versions with low-entropy random number generators, and that attackers may be using AI-generated scripts to brute-force affected wallets. Currently, there is no conclusive evidence directly linking this fund transfer to the Coldcard Mk3 vulnerability.