Galaxy Research Says Coldcard Weak-Randomness Attacks Continue

Galaxy Research head Alex Thorn said attacks targeting Coldcard wallets generated with weak random numbers are still ongoing, and users who still hold funds in the affected Coldcard single-signature wallets should move them to secure addresses immediately. According to Odaily, new victim addresses and attacker addresses are being added to an investigation database, and Galaxy Research plans to publish updated statistics on the number of affected addresses.Thorn said the first three waves of attacks showed clear automated patterns, and the stolen BTC remains in attacker addresses without being moved. He added that smaller attackers have recently begun exploiting the vulnerability to steal funds and transfer them through chain-stripping and cross-chain services. He said single-signature wallet addresses generated by Coldcard after a firmware upgrade in March 2021 may be at risk, and users should move funds as soon as possible.Galaxy Research previously disclosed that the Coldcard vulnerability attacks have involved about 1,367.05 BTC across roughly 4,585 addresses.