Coinkite released new firmware for Coldcard hardware wallets following a randomness vulnerability that enabled attackers to steal $114 million in Bitcoin, adding user-supplied entropy and stricter transaction checks.
Bitcoin hardware wallet manufacturer BitBox released firmware version 9.26.5 to address severe security vulnerabilities discovered during internal security reviews that utilized AI models. The company confirmed no funds were stolen but urged users to update their devices.
Following a firmware vulnerability in Coldcard hardware wallets that affected seed generation, attackers have begun laundering stolen cryptocurrency, with 64 BTC ($4.17M) and 200 ETH ($380K) routed through mixers. At least 15 separate attackers are exploiting the vulnerability, with the largest controlling 1,159 BTC that remains unmoved, in what's being called the biggest hardware wallet exploit in crypto history with losses exceeding $30 million.
