The estimated financial damage from the Coldcard hardware wallet vulnerability has surged to $70 million, according to a detailed analysis by Galaxy Digital. The incident, which occurred in a 41-minute window on July 30, saw 1,196 addresses lose a total of 1,082.65 Bitcoin.
The findings, which significantly exceed earlier estimates, highlight the severity of the security breach and underscore the importance of robust security measures in cryptocurrency wallets. Galaxy Digital’s research arm, Galaxy Research, traced the Bitcoin movements across blocks 960,183 to 960,191, approximately 30 hours before Coldcard published its first security advisory.
Initial Analysis vs. Galaxy Digital’s Findings
Earlier estimates by Rob Hamilton, CEO and co-founder of AnchorWatch, suggested that the incident involved 594.48 Bitcoin, worth around $38 million, moving across 500 transactions within a three-block window. However, Galaxy Digital’s analysis revealed a much broader impact, with a distinct pattern of transactions sharing identical 30 satoshis per virtual byte fees and no change outputs.
“The initial attack activity is identifiable on-chain through this pattern, but future attacks against Coldcard-generated addresses may not follow the same fingerprint,” Galaxy Digital noted in their report.
Coinkite’s Response and Security Measures
Coinkite, the company behind Coldcard, has taken responsibility for the firmware bug and is working to mitigate the issue. Co-founder Rodolfo Novak acknowledged the problem in an X post, stating, “We take full responsibility for this firmware bug and are working to determine the full scope of the issue.”
Novak also announced that Coinkite has released a hotfix to remove the software fallback path, although he warned that the update does not protect seeds generated on vulnerable firmware. “We advise users who generated seeds on vulnerable firmware to move their funds to a new seed immediately,” he emphasized.
Broader Implications and Future Outlook
The Coldcard incident serves as a stark reminder of the potential risks associated with hardware wallets and the critical need for continuous security updates. As the cryptocurrency ecosystem continues to grow, the importance of robust security protocols cannot be overstated.
“This incident highlights the need for users to stay informed about security updates and to follow best practices for securing their digital assets,” said a security expert. “It also underscores the importance of diversifying one’s digital asset storage across multiple platforms and devices.”
Looking ahead, the cryptocurrency community will likely see increased scrutiny of hardware wallets and a renewed focus on security enhancements. Companies like Coinkite are expected to redouble their efforts to ensure that such vulnerabilities are identified and addressed promptly, safeguarding the trust of their users.
About the Author
