A vocal member of the Dogecoin community, Mishaboar, has called on cryptocurrency holders to take immediate action following a significant security breach affecting Coldcard, a hardware wallet widely used for storing Bitcoin.
Urgent action urged after wallet vulnerability
Mishaboar issued an alert to all users who have ever interacted with any version of the Coldcard device, recommending they promptly transfer their assets to a new wallet and create a completely new seed phrase, rather than reusing the original one.
This advice closely follows an official warning from Coldcard itself, instructing users to upgrade their devices, generate fresh seed phrases, and carefully move their funds away from affected wallets to avoid further losses.
Mishaboar also shared a key safety reminder for those relying on hardware wallets: he cautioned that seed phrases should never be entered into a computer and emphasized that offline backups must be kept securely, with at least one stored at a separate location.
Alex Thorn, head of research at Galaxy Research, reported that attacks linked to the Coldcard vulnerability are ongoing. He urged affected users who have not yet migrated their bitcoin to act quickly, as funds in attacker-controlled wallets have not been moved since the breach.
The breach stemmed from a vulnerability present in Coldcard’s March 2021 firmware release. This flaw allowed malicious actors to drain funds from thousands of wallets by exploiting weak software-generated randomness in key creation.
Large-scale attack waves and long-term holders affected
Galaxy Research conducted a detailed on-chain analysis and disclosed that it identified three distinct attack waves targeting Coldcard-generated addresses.
Altogether, these attacks affected 4,585 addresses and resulted in the theft of approximately 1,367.05 BTC, valued at about $88.6 million. According to data from Galaxy Research, the stolen bitcoin had been dormant for an average of 3.18 years, with the median age of affected funds at 3.55 years, suggesting most of the victims were long-term bitcoin holders who had stored their assets for several years.
Coldcard users are advised to remain vigilant, monitor their wallets, and take immediate steps to enhance security wherever possible amidst these ongoing threats.
Market innovation increases need for robust safeguards
The evolving nature of crypto technology and asset management highlights the importance of proper risk management. In navigating today’s changing landscape, platforms such as 1stepSwap help bridge the gap between traditional finance and crypto, offering a streamlined approach to asset diversification. By bringing real-world assets like leading US stocks, gold, and silver onto the blockchain and enabling direct wallet access, 1stepSwap reduces complexity and removes intermediaries. Its pricing feature automatically finds the most competitive rates for users, allowing seamless, instant transactions across the world’s largest equities.
