因Coldcard遭黑客攻击,近期比特币钱包最大规模被盗事件引发新一轮损失!损失持续攀升

cryptonews.ruPublished on 2026-08-02Last updated on 2026-08-02

Abstract

Galaxy Research报告称,针对Coldcard硬件钱包的第三波攻击已发生,此次造成207.7294 BTC损失,使总损失增至约1367.05 BTC(约8860万美元),涉及4585个地址。前两波攻击在区块链行为上相似,疑似同一攻击者所为,但第三波在多个可测特征上显著不同:它为每个受害者创建独立地址、针对P2WSH而非P2WPKH地址、平均每次汇入6.37个受害地址,且仅扫描标准派生路径。这些差异可能是原攻击者升级工具以混淆追踪,也可能是漏洞公开后出现了新的攻击者。目前,被盗BTC仍存放在攻击者地址中未转移。分析显示,损失地址多为余额低于1 BTC的个人钱包,但大余额地址贡献了主要损失金额。存在漏洞的Coldcard固件发布于2021年3月17日,所有被盗BTC均在此后生成。

Galaxy Research公司宣布发现了据信针对Coldcard设备创建地址的第三波攻击。根据现有数据,在最近一波攻击中被提取了207.7294 $BTC,这使得总损失增加至1367.05 $BTC,约合8860万美元,涉及4585个地址。

据该研究公司数据,前两波攻击在区块链上主要表现出相似的行为模式。在这两波中,资金都被转移到了少数共享的收集地址,使用了P2WPKH地址,且攻击目标是基于不同派生路径创建的钱包。两波攻击之间大约27小时的间隔以及交易结构的相似性表明,攻击可能由同一人或同一团伙实施。

但Galaxy Research强调,前两波攻击在交易手续费和“手续费替换”信号上存在差异,因此无法确凿证明是同一恶意攻击者所为。

第三波攻击可能指向另一攻击者

根据Galaxy Research的数据,第三波攻击在几乎所有可衡量的行为特征上都与前两波不同。与之前攻击中使用共享收集地址不同,第三波攻击为每位受害者创建了独立的目标地址。

据称,第三波中被盗的比特币存储在P2WSH地址上,而非P2WPKH地址,并且每次转储平均聚合了6.37个受害者地址。相比之下,第一波攻击每次交易仅针对一个受害者地址。此外,有声明称第三波攻击仅扫描了标准生成路径上的地址。

研究人员指出,这些变化可能是同一攻击者为增加区块链交易追踪难度而重新设计工具所致。但也提到,在Coldcard漏洞信息公之于众后,可能存在第二名攻击者瞄准了同一组易受攻击的密钥池。

Galaxy Research公司表示,区块链数据无法明确区分这两种情况。该公司声明,虽然每一波攻击无疑都是由单一操作者操控,但无法肯定地说所有三波攻击都与同一恶意攻击者有关。

攻击者地址上的比特币尚未转移

根据Galaxy Research的计算,攻击者总共控制了1,366.3865 $BTC。据称,并非所有这些价值约8860万美元的比特币被转移到的攻击者最终地址都已在区块链上被花费。

显示攻击造成的比特币总损失金额图表。来源:Galaxy Research。

逐区块分析显示,地址在攻击波次期间被批量广播到网络。每一波攻击内部的中介区块中没有任何可归因于攻击者行为的广播操作,这表明操作是以批次而非连续方式发送到网络的。

据称,按地址数量计,损失主要集中在余额低于1 $BTC的钱包,但余额较大的地址在总金额方面起到了决定性作用。Galaxy Research公司评估认为,这种分布更类似于个人用户的自托管钱包,而非机构托管服务。

研究还显示,存在漏洞的Coldcard软件发布于2021年3月17日,大约在比特币网络区块高度674,951处。Galaxy Research公司声明,在前三波攻击中被识别为被盗的所有比特币,均是在此区块之后创建的。

*本文不构成投资建议。

end-content

Trending Cryptos

Related Questions

Q根据文章,Coldcard钱包黑客攻击事件的三次攻击浪潮中,总共造成了多少比特币的损失?

A根据文章,第三次浪潮后,总损失达到了1367.05 BTC,价值约8860万美元。

Q文章提到第三次攻击浪潮与之前两次在哪些关键行为特征上存在不同?

A第三次浪潮主要不同点在于:为每位受害者创建了单独的收款地址,而非使用几个共享的集合地址;窃取的资金来自P2WSH地址,而非P2WPKH地址;每次交易平均聚合了6.37个受害地址;并且只扫描了标准的派生路径。

QGalaxy Research为何不能确定三次攻击浪潮是否为同一黑客所为?

A因为三次攻击浪潮在交易费用、手续费替代信号以及上述关键行为特征上存在显著差异,虽然可能是一人优化了攻击工具,但也可能是另一名黑客在漏洞公开后针对同一批脆弱密钥发起攻击,区块链数据无法明确区分这两种情况。

Q被黑客窃取的比特币目前状态如何?

A文章指出,黑客控制的比特币总共约1,366.3865 BTC,价值约8860万美元,这些资金目前仍留在黑客的最终接收地址中,尚未在区块链上被花费或转移。

Q这次攻击事件中受影响的地址在资金规模分布上有何特点?

A从地址数量上看,损失主要集中在余额小于1 BTC的钱包。但从损失总额看,余额较大的地址是关键。这种分布更类似于个人用户的自托管钱包,而非机构托管服务。

Related Reads

Trump's Mining Company Reports $57 Million Loss

American Bitcoin, a cryptocurrency mining company co-founded by Eric Trump, son of Donald Trump, reported a net loss of $57.2 million for the second quarter of 2026. This loss was primarily driven by a decline in the value of Bitcoin held on its balance sheet. The company mined 932 BTC in the quarter, increasing its total reserves to 8,002 BTC, making it the 16th largest corporate Bitcoin holder. While mining revenue rose 8% to $67 million, the company's cost to mine one Bitcoin was approximately $36,500 against a market price around $63,000 in early August. Approximately 3,090 of its Bitcoins are pledged as collateral to equipment maker Bitmain. The company operates using the data centers and hardware of Hut 8, which received an 80% stake in American Bitcoin at its launch. American Bitcoin went public in September 2025, but its stock (ABTC) has since fallen over 90%. The company has faced controversy, with a Forbes investigation alleging it uses the Trump name to attract investors while primarily buying Bitcoin with raised funds rather than mining efficiently—a claim Eric Trump vehemently denied. For comparison, Michael Saylor's MicroStrategy, the world's largest corporate Bitcoin holder, reported a Q2 2026 net loss of $8.2 billion, also due to Bitcoin depreciation. Eric Trump has positioned the company as a way to give investors stock-market exposure to Bitcoin, similar to MicroStrategy, and has called himself a "Bitcoin maximalist."

cryptonews.ru27m ago

Trump's Mining Company Reports $57 Million Loss

cryptonews.ru27m ago

Forecast for August 2026 for the Crypto Market: Macroeconomics Will Determine Everything

Happy Coin News, with AI assistance from Gemini, presents a cryptocurrency market forecast for August 2026. The month is expected to solidify the market's structural transformation, where speculative narratives give way to pragmatic institutional integration. The key determinant of market dynamics will be the macroeconomic environment, with high U.S. interest rates and persistent inflation likely limiting retail capital inflow into high-risk digital assets. In this climate of limited liquidity, institutional players are predicted to gain near-total market control. Regulatory shifts will also be impactful. The EU's MiCA framework transition period officially ended on July 1, 2026, requiring full authorization for service providers. Meanwhile, the U.S. FIT21 bill will gain momentum, clarifying SEC and CFTC roles. These macro and regulatory pressures are reflected in the market structure: total capitalization is around $2.221 trillion, with Bitcoin's dominance high at 56.35%. A broad "altcoin season" is not imminent, as the Altcoin Season Index remains low. Growth in altcoins will be selective, with smart capital concentrating on AI infrastructure, next-gen DeFi, and tokenization projects. The main trend dominating August will be the tokenization of real-world assets (RWA), accelerated by the new regulatory clarity. This institutional integration will further tighten security and custodial requirements, moving the market definitively away from unregulated platforms toward hybrid models combining traditional finance tools with transparent blockchain infrastructure.

cryptonews.ru29m ago

Forecast for August 2026 for the Crypto Market: Macroeconomics Will Determine Everything

cryptonews.ru29m ago

Trading

Spot

Hot Articles

What is $BITCOIN

DIGITAL GOLD ($BITCOIN): A Comprehensive Analysis Introduction to DIGITAL GOLD ($BITCOIN) DIGITAL GOLD ($BITCOIN) is a blockchain-based project operating on the Solana network, which aims to combine the characteristics of traditional precious metals with the innovation of decentralized technologies. While it shares a name with Bitcoin, often referred to as “digital gold” due to its perception as a store of value, DIGITAL GOLD is a separate token designed to create a unique ecosystem within the Web3 landscape. Its goal is to position itself as a viable alternative digital asset, although specifics regarding its applications and functionalities are still developing. What is DIGITAL GOLD ($BITCOIN)? DIGITAL GOLD ($BITCOIN) is a cryptocurrency token explicitly designed for use on the Solana blockchain. In contrast to Bitcoin, which provides a widely recognized value storage role, this token appears to focus on broader applications and characteristics. Notable aspects include: Blockchain Infrastructure: The token is built on the Solana blockchain, known for its capacity to handle high-speed and low-cost transactions. Supply Dynamics: DIGITAL GOLD has a maximum supply capped at 100 quadrillion tokens (100P $BITCOIN), although details regarding its circulating supply are currently undisclosed. Utility: While precise functionalities are not explicitly outlined, there are indications that the token could be utilized for various applications, potentially involving decentralized applications (dApps) or asset tokenization strategies. Who is the Creator of DIGITAL GOLD ($BITCOIN)? At present, the identity of the creators and development team behind DIGITAL GOLD ($BITCOIN) remains unknown. This situation is typical among many innovative projects within the blockchain space, particularly those aligning with decentralized finance and meme coin phenomena. While such anonymity may foster a community-driven culture, it intensifies concerns about governance and accountability. Who are the Investors of DIGITAL GOLD ($BITCOIN)? The available information indicates that DIGITAL GOLD ($BITCOIN) does not have any known institutional backers or prominent venture capital investments. The project seems to operate on a peer-to-peer model focused on community support and adoption rather than traditional funding routes. Its activity and liquidity are primarily situated on decentralized exchanges (DEXs), such as PumpSwap, rather than established centralized trading platforms, further highlighting its grassroots approach. How DIGITAL GOLD ($BITCOIN) Works The operational mechanics of DIGITAL GOLD ($BITCOIN) can be elaborated on based on its blockchain design and network attributes: Consensus Mechanism: By leveraging Solana’s unique proof-of-history (PoH) combined with a proof-of-stake (PoS) model, the project ensures efficient transaction validation contributing to the network's high performance. Tokenomics: While specific deflationary mechanisms have not been extensively detailed, the vast maximum token supply implies that it may cater to microtransactions or niche use cases that are still to be defined. Interoperability: There exists the potential for integration with Solana’s broader ecosystem, including various decentralized finance (DeFi) platforms. However, the details regarding specific integrations remain unspecified. Timeline of Key Events Here is a timeline that highlights significant milestones concerning DIGITAL GOLD ($BITCOIN): 2023: The initial deployment of the token occurs on the Solana blockchain, marked by its contract address. 2024: DIGITAL GOLD gains visibility as it becomes available for trading on decentralized exchanges like PumpSwap, allowing users to trade it against SOL. 2025: The project witnesses sporadic trading activity and potential interest in community-led engagements, although no noteworthy partnerships or technical advancements have been documented as of yet. Critical Analysis Strengths Scalability: The underlying Solana infrastructure supports high transaction volumes, which could enhance the utility of $BITCOIN in various transaction scenarios. Accessibility: The potential low trading price per token could attract retail investors, facilitating wider participation due to fractional ownership opportunities. Risks Lack of Transparency: The absence of publicly known backers, developers, or an audit process may yield skepticism regarding the project's sustainability and trustworthiness. Market Volatility: The trading activity is heavily reliant on speculative behavior, which can result in significant price volatility and uncertainty for investors. Conclusion DIGITAL GOLD ($BITCOIN) emerges as an intriguing yet ambiguous project within the rapidly evolving Solana ecosystem. While it attempts to leverage the “digital gold” narrative, its departure from Bitcoin's established role as a store of value underscores the need for a clearer differentiation of its intended utility and governance structure. Future acceptance and adoption will likely depend on addressing the current opacity and defining its operational and economic strategies more explicitly. Note: This report encompasses synthesised information available as of October 2023, and developments may have transpired beyond the research period.

1.4k Total ViewsPublished 2025.05.13Updated 2025.05.13

What is $BITCOIN

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of BTC (BTC) are presented below.

活动图片