Ledger就Coldcard遭黑客攻击事件警告人工智能风险

cryptonews.ruPublished on 2026-08-05Last updated on 2026-08-05

Abstract

莱杰公司（Ledger）首席技术官夏尔·吉耶梅针对Coldcard硬件钱包被黑事件发出警告，指出该事件暴露了比特币存储设备中随机数生成器验证的漏洞。他强调，开源代码并不等同于经过审计的代码，此次漏洞在公开代码库中存在超过五年却未被发现。莱杰的设备采用安全元件中的硬件随机数生成器，避免了Coldcard中因软件备用路径导致的问题。事件引发了关于人工智能在代码分析中作用的讨论。吉耶梅表示，AI工具能加速漏洞发现，但尚无公开证据表明攻击者实际使用了AI。然而，有用户在Reddit和X平台声称，Claude Code仅用8分钟就通过单次提示发现了该漏洞。风投基金Dragonfly管理合伙人哈希布·库雷希此前称，仅需2美元用AI进行代码审计即可预防此次攻击。据Galaxy Research数据，至少15名攻击者利用了该漏洞，已确认的三波攻击造成约1亿美元损失，若包括可能的第四波，总损失可能达1.3亿美元。此外，Trezor和Foundation等硬件钱包厂商已就事件相关的钓鱼攻击发出警告，提醒用户防范冒充官方的“硬件审计”欺诈。

利用Coldcard漏洞的事件表明，有必要重新审视比特币存储设备中随机数生成器的验证机制。Ledger公司首席技术官夏尔·吉耶梅对此作出了声明，Decrypt报道了此消息。

据他所述，此次事件暴露了"开源即等于已验证代码"这种方法的局限性。这位专家指出，该错误在公开数据库中存在了五年多，但在攻击开始前一直未被发现。

"开源代码和经过验证的代码不是一回事，" Ledger首席技术官表示。

根据Ledger的文档，该公司的设备通过安全元件中的硬件随机数生成器生成256个随机比特。吉耶梅称，在这种架构中不存在软件备用路径，而这正是Coldcard出现问题的地方。

Sleep at Night Technology：Coldcard如何将用户的睡眠变为噩梦

Ledger将此次事件与人工智能工具在代码分析中日益增长的作用联系起来。吉耶梅表示，此类系统加速了漏洞的发现，无论是对攻击者还是防御者而言。然而，在撰写本文时，尚无公开证据表明攻击者确实使用了人工智能。

U.Today关注到了Reddit和X平台上的讨论。据用户声称，Claude Code在收到检查源代码的请求后，仅用大约八分钟就找到了该漏洞。

这太疯狂了

claude code仅用一次提示，在仅仅8分钟的思考后就找到了COLDCARD钱包的漏洞

我们还没准备好迎接即将到来的事情 pic.twitter.com/wh1LtEWuje
— Medusa (@MedusaOnchain) August 2, 2026

早些时候，风险投资基金Dragonfly的管理合伙人哈希布·库雷希曾表示，只需花费2美元利用人工智能检查代码，Coldcard冷钱包遭受的攻击本可以预防。

根据Galaxy Research的数据，至少有15名不同的恶意攻击者利用了该漏洞。分析师估计，经过确认的三波攻击造成的损失已达1亿美元。考虑到可能的第四波攻击，总损失可能增长至约1.3亿美元。

需要提醒的是，8月4日，硬件加密货币钱包制造商Trezor和Foundation就此次事件背景下的网络钓鱼攻击向用户发出警告。在某些案例中，诈骗者冒充制造商发送邮件，并提供所谓的"硬件审计"服务。

end-content

Trending Cryptos

CitreaCTR

wrapped stUSDTWSTUSDT

Thune to file motion for September vote on CLARITY Act bill

Republican Senate Leader John Thune plans to file a cloture petition on the Digital Asset Market Clarity (CLARITY) Act before the August recess, aiming to set up a floor vote in September. This signals GOP leadership's intent to prioritize the bill after the Senate's break. However, the bill faces hurdles: the need for 60 votes, banking lobby concerns over stablecoin yields affecting local banks, and an ongoing ethics provision negotiation with the White House requiring disclosure of crypto holdings by officials. Coinbase CEO Brian Armstrong supports the bill, stating it would foster investment and innovation. Analysts note the September timeline is tight, with only 14 working days before the October recess for midterm campaigns, making passage uncertain.

cryptonews.ru43m ago

Thune to file motion for September vote on CLARITY Act bill

cryptonews.ru43m ago

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

Bitcoin miners' pivot to artificial intelligence (AI) and high-performance computing (HPC) is transforming their business models, but investor enthusiasm for new infrastructure deals has significantly waned, indicating a more selective market as AI-hosting strategies become mainstream. An analysis shows the market reaction to AI infrastructure announcements has weakened substantially over the past two years. While the size and value of contracts have increased, the average stock price movement on announcement day has fallen from about 24% for early deals to around 10% for recent ones. The median gain has also halved. This suggests investors now place greater emphasis on execution, financing, and long-term profitability rather than just headline contract values. This cooling sentiment is evident in the reaction to specific deals. Early agreements, like those from Core Scientific and TeraWulf, triggered stock surges of 40-60%. In contrast, more recent mega-deals from companies like TeraWulf, CleanSpark, and Bitdeer resulted in much more modest gains of 5-12%, with some gains fading by market close. Stock performance reflects this shift. While demand for AI infrastructure remains high, the TEM AI Infrastructure Growth Index is down about 28.5% from its June peak, aligning with a broader pullback in related sectors like semiconductors.

cryptonews.ru44m ago

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

cryptonews.ru44m ago

Trezor: Your keys are always held by someone. And that someone should be you.

Following a recent security incident with a competing hardware wallet, this article defends the concept of self-custody and clarifies its core principles. It argues that while the specific vulnerability was serious, it represents a failure of one product, not of hardware wallets or self-custody in general. The piece cautions against overreactions like abandoning self-custody for exchanges or hastily adopting overly complex multi-signature setups for average users. The author's central argument is that someone always holds your Bitcoin keys—the only question is who. Choosing a custodian (like an exchange) shifts the risk to trusting a third party's honesty and solvency, placing you back in the system Bitcoin was designed to escape. With a hardware wallet, you trust only that the device was built correctly—a claim that can be verified due to open-source code and security audits. The stated mission is to make self-custody as simple and intuitive as possible, moving it from a niche for experts to an obvious choice for everyone. The article concludes by emphasizing that self-custody’s inherent responsibility is the very point of true ownership, and that transparency and verification, not blind trust, are what make it stronger.

cryptonews.ru46m ago

Trezor: Your keys are always held by someone. And that someone should be you.

cryptonews.ru46m ago

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

Bitcoin mining firm CleanSpark (Nasdaq: CLSK) reported Q3 FY2026 revenue of $138 million, missing Wall Street consensus estimates of $142.2 million. The figure represents a 30.5% year-over-year decline from $198 million. The company posted a net loss of $239 million ($0.89 per basic share), a stark reversal from a net profit of $257 million ($0.90 per share) in the same quarter last year. Its stock fell 5.5% on Thursday but rebounded 3% in Friday's premarket, trading above $13.10. CleanSpark is diversifying beyond Bitcoin mining, recently signing a 20-year lease with an unnamed investment-grade tech company for a 175-megawatt data center in Georgia, a deal estimated to generate $6.6 billion in contract revenue.

cryptonews.ru46m ago

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

cryptonews.ru46m ago

Two Senators Propose Exempting Trump from Crypto Business Taxes

Two U.S. Senators, Republican Thom Tillis and Democrat Ruben Gallego, have proposed an amendment that could exempt former President Donald Trump from taxes on his crypto business income for many years, potentially saving him millions. The amendment would allow Trump to avoid capital gains tax if he reinvests proceeds from asset sales and holds them until death. Trump reported $1.4 billion in income from cryptocurrency and meme coin projects for 2025. Without the deferral, he would face an immediate 20% tax on gains. As president, he is not required to divest income-generating assets. Uncertainty over an "ethical aspect," demanded by Democratic congressmen, has delayed Senate consideration of the CLARITY bill before the recess. Senate Republican leader John Thune did not file a cloture motion by August 7 to advance the vote, citing protracted negotiations with the administration. The Senate is on recess until September 14, with few sessions scheduled before the midterm elections on November 3. Reports conflict on whether Trump agreed to the ethical provisions in late July meetings with senators. Meanwhile, in early August, Senate Democratic Leader Chuck Schumer introduced a bill to create an independent anti-corruption bureau with the power to hold the U.S. president and officials accountable for illicit funds, including from cryptocurrencies.

cryptonews.ru51m ago

Two Senators Propose Exempting Trump from Crypto Business Taxes

cryptonews.ru51m ago

Trading

Spot

Hot Articles

How to Buy T

Welcome to HTX.com! We've made purchasing Threshold Network Token (T) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy Threshold Network Token (T) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your Threshold Network Token (T)After purchasing your Threshold Network Token (T), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade Threshold Network Token (T)Easily trade Threshold Network Token (T) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

12.8k Total ViewsPublished 2024.03.29Updated 2026.06.02

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of T (T) are presented below.

Ledger就Coldcard遭黑客攻击事件警告人工智能风险

Abstract

Trending Cryptos

Related Questions

Related Reads

Thune to file motion for September vote on CLARITY Act bill

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

Trezor: Your keys are always held by someone. And that someone should be you.

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

Two Senators Propose Exempting Trump from Crypto Business Taxes

Trading

Hot Articles

How to Buy T

Discussions

Top Questions