Coldcard released patched firmware following a $114M Bitcoin theft; three-week review also identified unrelated security bugs.
Security & Exploits ·
Coldcard released patched firmware following discovery of a vulnerability that led to a $114 million Bitcoin theft. The hardware wallet maker's three-week security review, conducted after the incident, identified additional bugs unrelated to the original flaw that enabled the theft.
The review process uncovered multiple security issues beyond the initial vulnerability exploited in the theft. The scope and nature of these secondary bugs remain unclear from available reporting, as does whether they posed immediate risk to users or were caught before exploitation.
Key details about the theft itself—including the attack vector, timeline, and whether the stolen funds have been traced or recovered—are not specified in the available material. The relationship between the original flaw and Coldcard's broader security posture, as well as the full scope of changes in the new firmware, also remain unconfirmed.