Coldcard Security Flaw Exposed After Five Years

A software flaw in Coldcard hardware wallets has come to light after staying hidden for five years. This vulnerability potentially allowed attackers to reconstruct private keys and steal over 1,100 bitcoin. The company behind the wallet stated that artificial intelligence may have helped identify the weakness.

The issue recently led to a coordinated attack where nearly 600 BTC, worth roughly $38 million at the time, were moved from compromised wallets. This situation highlights how even long standing security measures can contain hidden errors that remain dormant until someone finds them.

Coldcard users should stay updated on the latest firmware versions to ensure their assets remain protected. Security researchers are continuing to examine the incident to understand how the flaw was first identified and if other risks remain in older software versions. Owners should verify their device settings and keep an eye on official security alerts.