Coinkite urges users of its Coldcard Mk3 device to migrate funds due to potential seed-generation risk, as experts examine an unexplained $38 million wallet drain. The implications for market security
Coldcard, a Canadian Bitcoin hardware maker, has issued a warning to users of its Coldcard Mk3 signing device, urging them to move funds from wallets whose seed phrases were generated on affected firmware versions. This comes in the wake of an unexplained $38 million wallet drain involving 594.48 BTC across multiple single-signature addresses.
The issue is centered around seeds created with Coldcard Mk3 devices running firmware version 4.0.1 or later, up to and including version 5.0.3. Coinkite has stated that the Mk4, Q, and Mk5 models are not affected by this potential risk. Users have been advised to generate a new seed on an unaffected device, verify its backup, send a small test transaction, and then proceed with moving funds.
Bitcoin security experts, including AnchorWatch CEO Rob Hamilton and Wizardsardine CEO Kevin Loaec, are currently investigating the $38 million wallet drain. Hamilton’s preliminary analysis suggests that 1,324 unspent outputs were swept across 500 transactions within a three-block window, with 562 BTC subsequently consolidated into another address.
The experts’ theories range from flawed entropy in seed generation to potential use of AI scripts for brute-forcing wallets. Loaec warns that even partially drained wallets may remain at risk if the attacker expands their scanning efforts. This incident highlights concerns about wallet security and the importance of keeping devices up-to-date with secure firmware.
The market reaction has been cautious, with Bitcoin prices showing minimal movement as traders await further details on the potential vulnerability. The broader implications for cryptocurrency users are significant, emphasizing the need for vigilant seed management practices to prevent future incidents.
Traders should closely monitor updates from Coinkite and security experts regarding this issue. Additionally, ongoing investigations into wallet generation processes could lead to improved standards in the industry, potentially enhancing overall security measures.
Source: Cointelegraph. Summarized and rewritten by the Vexoda Newsroom. This is market news, not financial advice.