DATABASES Signal 152
Bitcoin hardware wallet Coldcard shipped a faulty firmware build, and hackers are now draining wallets; Galaxy Research estimates $70M+ stolen (Shaurya Malwa/CoinDesk)
↗
This is a concrete example of how a firmware supply chain failure in a hardware security device can lead directly to mass asset theft. Engineers responsible for key storage or hardware wallet integration must now treat firmware integrity verification as a life-or-death requirement, not a best-effort check.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Coldcard shipped a faulty firmware build that attackers exploited to drain funds from 1,196 wallets.
Galaxy Research estimates more than 1,000 bitcoin, worth approximately $70 million, was stolen in a 41-minute window on July 30.
The incident underscores that a single compromised firmware release can catastrophically undermine the security guarantees of hardware wallets.
THE CLUSTER