#Coldcard黑客经THORChain将赃款兑换ETH

Number of @CasaHODL clients who lost bitcoin while having a compromised COLDCARD in their multisig key set: 0.

Unpopular opinion: I’d rather have a hardware wallet leak my email address than have a Coldcard leak my seed phrase

“Pikachu, I choose you!” Nope I chose imaginary internet money instead and got rugged

🟥 Things I'm looking at today 🟥 Powered by @yeet Subscribe: https://t.co/7EJrnNibAt Crypto rangebound, Cool PPI, KOSPI in bull market Crypto * BTC: 63,794 (+1%) | BTC.D: 58.6% (+0.1%) * ETH: 1,893 (0%) | BNB: 610 (0%) | SOL: 76 (+1%) * Fear & Greed: 30 | 24h Liq: $175m * BTC ETFs: -$61M | ETH ETFs: +$7M * Top Gainers: APR, AKE, VELVET, BTW, FGRS * BTC spot trading volume hits 7-year low * BTC on Coinbase trading $150 below Binance * BTC still going to $189K in 2026: Citi * User pays $103K fee on single BTC transaction * $15B BTC moved after Coldcard hack * ETH staking ratio hits record 34.4% * Hyperliquid seeks path to US perps market * Hyperliquid to add HIP-1 scaleWei Function * Solana stays up as outage disrupts 102 validators * GSR model lifts SOL to 43.6%, cuts BTC to 17% * Crypto firms urge AI labs for early model access * GS set to acquire BTCI through $2.3B Neos deal * Wall Street tests tokenization * Lighter teases Robinhood Wallet event * July CEX derivatives volume down 11% m/m * Blockchain Assoc backs Custodia SCOTUS bid * SEC clears Franklin Templeton’s onchain fund * Capital Intl buys $300M more MSTR, holds $3B * Swiss National Bank discloses $72M MSTR stake * Kraken adds 24/7 S&P 500 perps * Algorand v5 ships post-quantum accounts * NYC probes prediction markets over marketing * South Korea tightens crypto transfers * Mexico mandates full KYC on crypto transfers * B Treasury to pay Europe's first BTC dividend * Polygon joins BoE’s CBDC Lab Macro * NASDAQ: $26,590 (+1%) | Gold: $4,380 (-1%) * Fed hike odds drop, on lower than expected PPI * VIX falls to lowest level this year * Groceries cost 40%+ vs 2019: St Louis Fed * US debt interest hits 4.2% of GDP * US banks sit on $325B unrealised losses * Treasury scraps beneficial ownership reports * Tariffs refunded but firms keep price rises * Press secretary Leavitt to leave White House * Trump sued over Truth Social $100K fast feed * DC homicides down 44% in Trump crackdown * Trump enlists firms for offensive cyberattacks * US to fully withdraw from Iraq by end-Sep * US has total control of Hormuz: Trump * Ukraine hits Russian warships, grain terminals * Ukraine drones overwhelm US forces in war game * Colombia OKs joint US ops against drug gangs * US, Japan plan deepest-ever rare earth sea mine * Gen Z moving funds from stocks to sports betting * Lakers sold to Kushner, Iger for record $12.5B AI & Tech * KOSPI back into technical bull market * Grok 4.7 to exceed all models in 3-4 weeks: Elon * Grok 4.6 gets Cursor driven upgrade * Brin urges Google to chase self-improving AI * Google ups Pixel 11 prices $100 on memory costs * Anthropic in talks to buy Decart AI for $6B * Apple's base iPhone 18 to skip autumn launch * Apple to pay publishers for AI-upgraded Siri * DeepSeek V4-Pro hits big benchmark gains * DeepSeek forms team to rival Claude Code * SK Hynix invests $38B in two new memory fabs * BofA to invest $250B in AI, chips and energy * OpenAI-backed Thrive raises $2B for enterprise AI * Cognition in talks to raise at $40B valuation * Lovable raises $400M at $13.3B valuation * Burry adds shorts on MU, ORCL and Nebius * Cerebras plunges despite raising guidance * SpaceX up 40% in 5 days as shorts flee * AI could be 99% of SpaceX value in 5 yrs: Elon @YEET: Crypto's Casino Just passed $3B in lifetime volume! gm

Interesting in depth analysis on the@COLDCARDwalletentropy vuln by@PraveenPerera

UPDATE: Total $BTC stolen in the @Coldcardwallet exploit exceeds 1,778 $BTC worth ~$112M across multiple attackers, with no confirmed attacker activity after August 6, 1,531 $BTC remains in attacker-controlled addresses, per @Galaxyhq Research. https://t.co/PgIE02e2Yj

1,778 Bitcoin stolen during the Coldcard hack

Galaxy's Head of Research Alex Thorn just said it: the Coldcard attacker is still out there, still hunting wallets. $115M gone. 200+ victims. And it's not over.

Coldcard Theft Case Update: FBI May Have Identified First-Wave Attackers According to Bitcoin Magazine, investigations by Block and Galaxy Research indicate that the FBI may have identified the attackers behind the first wave of the July 2026 Coldcard hardware wallet exploit, in which 1,082.65 BTC worth approximately $11.8 million was stolen. Block’s investigation found that the attackers used an account with a paid blockchain data provider while sweeping funds onchain, and the provider’s internal logs closely matched the hackers’ request patterns. Coldcard was previously found to have a random number generator vulnerability caused by the libngu library introduced in 2021, potentially allowing the private keys generated by a large number of devices to be cracked. Officials are still tracking multiple waves of attacks.

Coldcard比特币盗窃案进展：首波作案者身份或已被FBI锁定，"监守自盗"证据不足 Coldcard 硬件钱包盗币事件出现新进展：Block 工程团队发现攻击者用某链上数据服务商的付费账号查询源地址，日志与作案手法高度吻合，线索已移交执法部门。 Galaxy Research 分析师 Alex Thorn 称"第一波攻击者身份执法部门可能已经知道"，这波攻击41分钟内卷走1082.65枚比特币(约7020万美元)，赃款至今未动。截至8月初，累计损失已超1800枚比特币(约1.18亿美元)。 漏洞根源：2021年3月，Coinkite CTO Peter Gray(化名Doc-Hex)将原本久经审查的加密库换成化名"Switch"编写的冷门库libngu，导致随机数生成实际调用了低熵的软件伪随机数生成器，旧款设备私钥因此可被暴力破解。 有研究者通过GPG签名发现"Switch"与Peter Gray用的是同一把私钥，两个身份存在关联。 Bitcoin Magazine 文章指出，这更像一连串低级失误的巧合，而非蓄意"监守自盗"：Switch身份隐藏得很差、一查就露馅，Coinkite管理层至今仍在公开处理善后、发布补丁，与卷款失联的经典监守自盗案例明显不同；多份独立技术复盘也未发现故意植入漏洞的证据。

1,082 bitcoin got swept out of wallets built on faulty Coldcard firmware. Galaxy now says the attacker may already be known to law enforcement.

Jonathan Goodman lost more than 18 bitcoins he was saving for his family in the #Coldcard hack. He shares why he isn’t angry, whether he’s joining the lawsuits forming, his opinion now of self-custody, and the lessons he took from the experience. He’s also treating what happened as a test: “It’s lit a fire under me to rebuild the savings for my children….Prove yourself. You did this once. See if you can do it again.” TIMESTAMPS: 00:00 Trailer & Intro @itscoachgoodman 00:37 The moment he found out he lost his Bitcoin 3:06 Why he trusted one device 4:33 Three backups, one flaw 5:56 How the company Coinkite responded 8:22 An hour on hold with police 13:52 What detectives told him 14:35 Telling his family 17:30 The critical error that caused $100 million losses 20:17 Class action lawsuits coming? 30:26 The risk nobody thinks to plan for 31:52 Watching the hacker move the coins 35:30 The strangers who showed up to help 38:43 Writing a book about the loss and lessons 41:11 To everyone else who lost coins 43:06 What he'd say to the founder 44:28 Will he hold his own keys again? 45:50 Why he never bet it all

Woohoo! I've wanted this in a 9.8 A++ for a minute (there's only 2 in the world). Grail secured. https://t.co/WbtAXzKn7w

🚨🚨 Anthropic put out the most capable AI model ever built on June 9. Three days later the White House forced it offline because researchers got it to hunt software vulnerabilities. It came back July 1 with tighter guardrails. Now look at what's happened since. Aug 3: Coldcard hardware wallets exploited, roughly $116M stolen. That was supposed to be the safest place in bitcoin. Aug 5: coordinated hacking attempts against some of the biggest hedge funds in the world. Aug 17: hardware wallet customers doxxed in a round of data thefts, now being targeted at home. This month attackers hit water utilities in at least 12 states. A county in Georgia lost water pressure. In Utah the pumps ran dry while the control panels said everything was normal. Security teams found a campaign against US industrial controllers running AI-generated exploit scripts dressed up as monitoring tools. One ransomware crew has breached over 500 critical infrastructure orgs just by watching patch announcements and racing companies to their own updates. Hotel wifi abroad is harvesting MFA codes. Voice phishers are talking their way into corporate file systems. Drainers took about $1.9B from crypto wallets in six months. Nobody can prove one model caused any of this. But the cost of running these attacks has collapsed, and that only moves in one direction. So do this now: 1. Real money lives in cold storage. Your seed phrase never gets typed into anything, photographed, or "verified" by anyone. No exceptions, not even once. 2.Firmware updates come from the official site, typed by you. Ask the Coldcard victims why. 3.Get rid of SMS 2FA. Authenticator app or a hardware key. 4. Bookmark your exchange and only ever use the bookmark. Not the link in an email, a DM or an ad. 5.Nobody from support is DMing you. That is an attack, every single time. 6. Go revoke your old token approvals today. Stuff you signed in 2021 is still live and drainers know it. 7. Voices can be cloned now. Someone calls asking for money or codes, you hang up and confirm on another channel. Set a code word with your family. 8. Keep two wallets. A hot one for signing around, and a cold one that never touches anything. Everyone's watching to see if the bull market is back. The drainers already know it is. Get your security tight before the money shows up.

"It really just hurt so much the people who wanted to be self sovereign," @CorySwan on the Coldcard exploit. https://t.co/OydKMdIH62

This thing has donated 17k to colon and prostate cancer from fees What if it donates 100k over the next week and you see news outlets showing the dickbutt I’m just sayin… https://t.co/OqnrHrs2e5