Ledger就Coldcard遭黑客攻击事件警告人工智能风险

cryptonews.ruPublicado a 2026-08-05Actualizado a 2026-08-05

Resumen

莱杰公司（Ledger）首席技术官夏尔·吉耶梅针对Coldcard硬件钱包被黑事件发出警告，指出该事件暴露了比特币存储设备中随机数生成器验证的漏洞。他强调，开源代码并不等同于经过审计的代码，此次漏洞在公开代码库中存在超过五年却未被发现。莱杰的设备采用安全元件中的硬件随机数生成器，避免了Coldcard中因软件备用路径导致的问题。事件引发了关于人工智能在代码分析中作用的讨论。吉耶梅表示，AI工具能加速漏洞发现，但尚无公开证据表明攻击者实际使用了AI。然而，有用户在Reddit和X平台声称，Claude Code仅用8分钟就通过单次提示发现了该漏洞。风投基金Dragonfly管理合伙人哈希布·库雷希此前称，仅需2美元用AI进行代码审计即可预防此次攻击。据Galaxy Research数据，至少15名攻击者利用了该漏洞，已确认的三波攻击造成约1亿美元损失，若包括可能的第四波，总损失可能达1.3亿美元。此外，Trezor和Foundation等硬件钱包厂商已就事件相关的钓鱼攻击发出警告，提醒用户防范冒充官方的“硬件审计”欺诈。

利用Coldcard漏洞的事件表明，有必要重新审视比特币存储设备中随机数生成器的验证机制。Ledger公司首席技术官夏尔·吉耶梅对此作出了声明，Decrypt报道了此消息。

据他所述，此次事件暴露了"开源即等于已验证代码"这种方法的局限性。这位专家指出，该错误在公开数据库中存在了五年多，但在攻击开始前一直未被发现。

"开源代码和经过验证的代码不是一回事，" Ledger首席技术官表示。

根据Ledger的文档，该公司的设备通过安全元件中的硬件随机数生成器生成256个随机比特。吉耶梅称，在这种架构中不存在软件备用路径，而这正是Coldcard出现问题的地方。

Sleep at Night Technology：Coldcard如何将用户的睡眠变为噩梦

Ledger将此次事件与人工智能工具在代码分析中日益增长的作用联系起来。吉耶梅表示，此类系统加速了漏洞的发现，无论是对攻击者还是防御者而言。然而，在撰写本文时，尚无公开证据表明攻击者确实使用了人工智能。

U.Today关注到了Reddit和X平台上的讨论。据用户声称，Claude Code在收到检查源代码的请求后，仅用大约八分钟就找到了该漏洞。

这太疯狂了

claude code仅用一次提示，在仅仅8分钟的思考后就找到了COLDCARD钱包的漏洞

我们还没准备好迎接即将到来的事情 pic.twitter.com/wh1LtEWuje
— Medusa (@MedusaOnchain) August 2, 2026

早些时候，风险投资基金Dragonfly的管理合伙人哈希布·库雷希曾表示，只需花费2美元利用人工智能检查代码，Coldcard冷钱包遭受的攻击本可以预防。

根据Galaxy Research的数据，至少有15名不同的恶意攻击者利用了该漏洞。分析师估计，经过确认的三波攻击造成的损失已达1亿美元。考虑到可能的第四波攻击，总损失可能增长至约1.3亿美元。

需要提醒的是，8月4日，硬件加密货币钱包制造商Trezor和Foundation就此次事件背景下的网络钓鱼攻击向用户发出警告。在某些案例中，诈骗者冒充制造商发送邮件，并提供所谓的"硬件审计"服务。

end-content

Criptos en tendencia

CitreaCTR

wrapped stUSDTWSTUSDT

Preguntas relacionadas

QLedger的CTO就Coldcard漏洞事件发表了什么核心观点？

ALedger的CTO查尔斯·吉勒梅的核心观点是，这次事件揭示了‘代码开源就等于代码经过审计’这一观念的局限性。他指出，该漏洞在公开代码库中存在了五年多，直到被利用攻击时才被发现，因此他强调‘开源代码和经过审计的代码不是一回事’。

QColdcard钱包漏洞事件导致了多大的经济损失？

A根据Galaxy Research的数据，通过该漏洞已确认的三次攻击浪潮造成的损失估计为1亿美元。如果算上推测的第四次攻击浪潮，总损失可能上升到约1.3亿美元。

Q文章中提及的AI工具Claude Code是如何与这次漏洞事件关联的？

A文章提及，有Reddit和X平台的用户声称，AI工具Claude Code在接到检查源代码的请求后，仅用了大约8分钟就发现了Coldcard钱包的这个漏洞。这引发了关于AI在加速漏洞发现方面作用的讨论。

Q在Coldcard事件发生后，其他硬件钱包公司有什么反应？

A在事件发生后，其他硬件钱包生产商如Trezor和Foundation警告用户提防利用此事件进行的网络钓鱼攻击。有报道称，一些诈骗者冒充硬件钱包制造商发送电子邮件，以‘硬件审计’为名进行诈骗。

QLedger的设备在随机数生成方面与Coldcard有何不同，以避免类似问题？

A根据Ledger的文档，其设备通过安全芯片中的硬件随机数生成器生成256个随机比特。Ledger的CTO表示，这种架构不存在像Coldcard那样出问题的软件备用路径，从而降低了类似风险。

Lecturas Relacionadas

Thune to file motion for September vote on CLARITY Act bill

Republican Senate Leader John Thune plans to file a cloture petition on the Digital Asset Market Clarity (CLARITY) Act before the August recess, aiming to set up a floor vote in September. This signals GOP leadership's intent to prioritize the bill after the Senate's break. However, the bill faces hurdles: the need for 60 votes, banking lobby concerns over stablecoin yields affecting local banks, and an ongoing ethics provision negotiation with the White House requiring disclosure of crypto holdings by officials. Coinbase CEO Brian Armstrong supports the bill, stating it would foster investment and innovation. Analysts note the September timeline is tight, with only 14 working days before the October recess for midterm campaigns, making passage uncertain.

cryptonews.ruHace 41 min(s)

Thune to file motion for September vote on CLARITY Act bill

cryptonews.ruHace 41 min(s)

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

Bitcoin miners' pivot to artificial intelligence (AI) and high-performance computing (HPC) is transforming their business models, but investor enthusiasm for new infrastructure deals has significantly waned, indicating a more selective market as AI-hosting strategies become mainstream. An analysis shows the market reaction to AI infrastructure announcements has weakened substantially over the past two years. While the size and value of contracts have increased, the average stock price movement on announcement day has fallen from about 24% for early deals to around 10% for recent ones. The median gain has also halved. This suggests investors now place greater emphasis on execution, financing, and long-term profitability rather than just headline contract values. This cooling sentiment is evident in the reaction to specific deals. Early agreements, like those from Core Scientific and TeraWulf, triggered stock surges of 40-60%. In contrast, more recent mega-deals from companies like TeraWulf, CleanSpark, and Bitdeer resulted in much more modest gains of 5-12%, with some gains fading by market close. Stock performance reflects this shift. While demand for AI infrastructure remains high, the TEM AI Infrastructure Growth Index is down about 28.5% from its June peak, aligning with a broader pullback in related sectors like semiconductors.

cryptonews.ruHace 43 min(s)

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

cryptonews.ruHace 43 min(s)

Trezor: Your keys are always held by someone. And that someone should be you.

Following a recent security incident with a competing hardware wallet, this article defends the concept of self-custody and clarifies its core principles. It argues that while the specific vulnerability was serious, it represents a failure of one product, not of hardware wallets or self-custody in general. The piece cautions against overreactions like abandoning self-custody for exchanges or hastily adopting overly complex multi-signature setups for average users. The author's central argument is that someone always holds your Bitcoin keys—the only question is who. Choosing a custodian (like an exchange) shifts the risk to trusting a third party's honesty and solvency, placing you back in the system Bitcoin was designed to escape. With a hardware wallet, you trust only that the device was built correctly—a claim that can be verified due to open-source code and security audits. The stated mission is to make self-custody as simple and intuitive as possible, moving it from a niche for experts to an obvious choice for everyone. The article concludes by emphasizing that self-custody’s inherent responsibility is the very point of true ownership, and that transparency and verification, not blind trust, are what make it stronger.

cryptonews.ruHace 44 min(s)

Trezor: Your keys are always held by someone. And that someone should be you.

cryptonews.ruHace 44 min(s)

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

Bitcoin mining firm CleanSpark (Nasdaq: CLSK) reported Q3 FY2026 revenue of $138 million, missing Wall Street consensus estimates of $142.2 million. The figure represents a 30.5% year-over-year decline from $198 million. The company posted a net loss of $239 million ($0.89 per basic share), a stark reversal from a net profit of $257 million ($0.90 per share) in the same quarter last year. Its stock fell 5.5% on Thursday but rebounded 3% in Friday's premarket, trading above $13.10. CleanSpark is diversifying beyond Bitcoin mining, recently signing a 20-year lease with an unnamed investment-grade tech company for a 175-megawatt data center in Georgia, a deal estimated to generate $6.6 billion in contract revenue.

cryptonews.ruHace 45 min(s)

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

cryptonews.ruHace 45 min(s)

Two Senators Propose Exempting Trump from Crypto Business Taxes

Two U.S. Senators, Republican Thom Tillis and Democrat Ruben Gallego, have proposed an amendment that could exempt former President Donald Trump from taxes on his crypto business income for many years, potentially saving him millions. The amendment would allow Trump to avoid capital gains tax if he reinvests proceeds from asset sales and holds them until death. Trump reported $1.4 billion in income from cryptocurrency and meme coin projects for 2025. Without the deferral, he would face an immediate 20% tax on gains. As president, he is not required to divest income-generating assets. Uncertainty over an "ethical aspect," demanded by Democratic congressmen, has delayed Senate consideration of the CLARITY bill before the recess. Senate Republican leader John Thune did not file a cloture motion by August 7 to advance the vote, citing protracted negotiations with the administration. The Senate is on recess until September 14, with few sessions scheduled before the midterm elections on November 3. Reports conflict on whether Trump agreed to the ethical provisions in late July meetings with senators. Meanwhile, in early August, Senate Democratic Leader Chuck Schumer introduced a bill to create an independent anti-corruption bureau with the power to hold the U.S. president and officials accountable for illicit funds, including from cryptocurrencies.

cryptonews.ruHace 50 min(s)

Two Senators Propose Exempting Trump from Crypto Business Taxes

cryptonews.ruHace 50 min(s)

Trading

Spot

Artículos destacados

Cómo comprar T

¡Bienvenido a HTX.com! Hemos hecho que comprar Threshold Network Token (T) sea simple y conveniente. Sigue nuestra guía paso a paso para iniciar tu viaje de criptos.Paso 1: crea tu cuenta HTXUtiliza tu correo electrónico o número de teléfono para registrarte y obtener una cuenta gratuita en HTX. Experimenta un proceso de registro sin complicaciones y desbloquea todas las funciones.Obtener mi cuentaPaso 2: ve a Comprar cripto y elige tu método de pagoTarjeta de crédito/débito: usa tu Visa o Mastercard para comprar Threshold Network Token (T) al instante.Saldo: utiliza fondos del saldo de tu cuenta HTX para tradear sin problemas.Terceros: hemos agregado métodos de pago populares como Google Pay y Apple Pay para mejorar la comodidad.P2P: tradear directamente con otros usuarios en HTX.Over-the-Counter (OTC): ofrecemos servicios personalizados y tipos de cambio competitivos para los traders.Paso 3: guarda tu Threshold Network Token (T)Después de comprar tu Threshold Network Token (T), guárdalo en tu cuenta HTX. Alternativamente, puedes enviarlo a otro lugar mediante transferencia blockchain o utilizarlo para tradear otras criptomonedas.Paso 4: tradear Threshold Network Token (T)Tradear fácilmente con Threshold Network Token (T) en HTX's mercado spot. Simplemente accede a tu cuenta, selecciona tu par de trading, ejecuta tus trades y monitorea en tiempo real. Ofrecemos una experiencia fácil de usar tanto para principiantes como para traders experimentados.

794 Vistas totalesPublicado en 2024.12.10Actualizado en 2026.06.02

Discusiones

Bienvenido a la comunidad de HTX. Aquí puedes mantenerte informado sobre los últimos desarrollos de la plataforma y acceder a análisis profesionales del mercado. A continuación se presentan las opiniones de los usuarios sobre el precio de T (T).