Coldcard Exploiter Moves Significant Amount of Bitcoin
- 97.09 BTC, valued at approximately $7.7 million, was moved from Wave 3 vaults.
- The transfer occurred via THORChain on September 2 and entered CoinJoin rounds over the weekend.
- 82% of the stolen Bitcoin from the entire Coldcard exploit remains unmoved.
- The attacker constructed and used a total of 293 two-of-two multisig vaults, with eleven now empty.
- A firmware bug introduced by Coinkite in March 2021 facilitated these thefts by weakening key strength significantly.
The recent movement of funds highlights ongoing activity by the Coldcard exploiter, who continues to utilize vulnerabilities for significant gains. Despite some recovery efforts, a large portion of the stolen Bitcoin remains under control of the attacker, emphasizing security challenges in hardware wallets.
This incident underscores the importance of robust security measures in cryptocurrency storage solutions and serves as a reminder for users to update their devices regularly to prevent similar exploits. (Source)
