# Self-Custody Articoli collegati

Il Centro Notizie HTX fornisce gli articoli più recenti e le analisi più approfondite su "Self-Custody", coprendo tendenze di mercato, aggiornamenti sui progetti, sviluppi tecnologici e politiche normative nel settore crypto.

Coldcard Urges Users to Move Bitcoin as Vulnerability Remains Exploited

Coldcard has urgently warned users to move their Bitcoin holdings, confirming on Tuesday that a vulnerability—which has already led to the theft of up to $114 million from self-custody wallets—remains actively exploited. The company stressed this is not a precautionary alert, citing a fourth wave of fraudulent transactions on Monday that drained approximately 449 BTC from 709 addresses. The flaw, dormant since 2021, involves firmware in cases where funds are controlled by a single key without a second confirmation. Users of Mk3 models (with firmware 4.0.1 or later) must transfer funds immediately. Owners of Mk4, Mk5, and Q models with firmware below 5.6.0 or 1.5.0Q should update firmware, generate a new wallet, then move coins. The vulnerability is tied to insufficient entropy during seed phrase generation, potentially allowing attackers to guess the key and drain wallets remotely. An exception is made for users who employed the device’s “dice roll” feature for key generation, as those wallets never touched the compromised code. Vincent Buzon, a cybersecurity expert at rival hardware wallet maker Ledger, noted the incident stemmed from an implementation failure, emphasizing that secure entropy generation must be hardware-based. He warned that software wallets on unprotected devices are riskier, and holding funds on centralized exchanges represents “not ownership, but an IOU.” Bitcoin traded around $63,800 in the U.S. on Tuesday, largely unaffected by the wallet warning.

cryptonews.ru6 h fa

Coldcard Urges Users to Move Bitcoin as Vulnerability Remains Exploited

cryptonews.ru6 h fa

Coldcard Vulnerability Becomes Worst for Canadian Card Holders

A vulnerability in the Coldcard hardware wallet has disproportionately impacted Canadian users, accounting for 25% of all Canadian losses, according to Chainalysis. The firm attributes this to the wallet's popularity in Canada, driven by influencer marketing campaigns. The US and Thailand were also significantly affected. Total losses from the ongoing exploit are estimated between $110 million and $150 million, with over 1,816 BTC stolen from 5,200 addresses. The attack involves multiple bad actors and may impact up to 15 different entities. In response, a 'Red Team' initiative is using AI analysis to scan for similar vulnerabilities in Bitcoin ecosystem code, reporting about one critical vulnerability per hour. Coldcard users are urged to update firmware, generate a new secure seed phrase, and transfer funds with a higher transaction fee. Some users successfully rescued funds by paying higher fees to outpace attacker transactions.

cryptonews.ru6 h fa

Coldcard Vulnerability Becomes Worst for Canadian Card Holders

cryptonews.ru6 h fa

Do the Coldcard attacks mean all hardware wallets are now insecure?

The recent discovery of a critical entropy-generation bug in Coldcard hardware wallets, which reportedly led to the theft of over $100 million in Bitcoin, has shaken the crypto community and raised questions about hardware wallet security. The flaw, present in certain firmware versions for over five years, weakened the randomness used to create private keys, making them vulnerable to attack. The incident highlights the fundamental and often overlooked importance of secure random number generation (RNG) in wallet creation. Industry responses vary: Ledger emphasizes certified secure hardware, Trezor combines multiple entropy sources, and Foundation advocates for open-source transparency and reproducible builds. Experts argue the bug was specific to Coldcard's implementation, not a verdict on all hardware wallets. However, it serves as a stark industry wake-up call. Recommendations include adopting stronger, verifiable standards for entropy generation and, for users, moving towards architectural mitigations like multisig setups that don't rely on a single point of failure.

cointelegraph11 h fa

Do the Coldcard attacks mean all hardware wallets are now insecure?

cointelegraph11 h fa

Reflections After the Coldcard Incident: Why Did Korean Users Escape Unscathed While the English-Speaking Community Suffered Heavily?

An incident involving a security flaw in Coldcard hardware wallets revealed a stark contrast in outcomes between the Korean and English-speaking Bitcoin communities. While many experienced users in the English-speaking world suffered significant losses, the Korean Bitcoin community reportedly avoided any direct financial impact. This divergence is attributed not to a gap in technical skill, but to deeper structural issues within the communities. Korean influencers and leaders strongly advocated for secure self-custody practices, specifically urging users to generate their seed phrases manually (e.g., by rolling physical dice) rather than relying on any wallet manufacturer's random number generator. This "don't trust, verify" approach was widely adopted, protecting users. In contrast, the English-speaking community saw its discourse and trust influenced by prominent influencers and podcasters who often had sponsorship ties or personal relationships with Coldcard's parent company, Coinkite. This created a "reverberation chamber" effect, where overconfidence in the product's security was amplified, leading followers to overlook potential risks. The incident underscores a critical need to extend Bitcoin's core principle of "Don't Trust, Verify" beyond code to the consumption of information itself. It highlights the dangers of over-reliance on influencers and the importance of maintaining neutrality by critically assessing the financial and relational biases of information sources. The Korean community's success serves as a lesson for the broader ecosystem to reflect on these dynamics to prevent future losses.

marsbit16 h fa

Reflections After the Coldcard Incident: Why Did Korean Users Escape Unscathed While the English-Speaking Community Suffered Heavily?

marsbit16 h fa

2013 Bitcoin Whale Awakens, Moves 500 BTC Amid Escalating Coldcard Concerns

A "Bitcoin whale" wallet dormant since 2013 has awakened, moving 500 BTC (worth ~$31.32 million). This transaction, first reported by btcparser.com and Whale Alert, originates from an address created on December 6, 2013, when Bitcoin first surpassed $1,000. The original 500 BTC were valued at approximately $521,000 at that time. This movement is seen as part of a wider trend prompted by growing security concerns surrounding a vulnerability in the Coldcard hardware wallet's firmware and random number generator. Reports indicate roughly 1,431.97 BTC have already been stolen via this exploit. Since July 30th, hundreds of BTC have been proactively transferred from other long-dormant wallets, likely due to these fears. Blockchain data shows the 500 BTC were sent to a Pay-to-Witness-Public-Key-Hash (P2WPKH) address not linked to any known exchange, custodian, or entity. For early adopters who embraced self-custody, the Coldcard flaw directly challenges their core philosophy of exclusive private key control. Analysts suggest this transfer represents a security precaution—an effort to protect capital by moving funds from a potentially vulnerable, outdated wallet—rather than a market-timing decision. The action underscores a shift in priority for some long-term holders from speculation to capital preservation amid heightened security risks.

cryptonews.ru2 giorni fa 20:36

2013 Bitcoin Whale Awakens, Moves 500 BTC Amid Escalating Coldcard Concerns

cryptonews.ru2 giorni fa 20:36

ZachXBT Refuses to Track $88M Coldcard Hack

Well-known blockchain investigator ZachXBT stated on X that he currently has no plans to track or investigate the Coldcard hack, which has resulted in losses of approximately $88.6 million. He cited a focus on ecosystems that value his work and noted a lack of support from Bitcoin maximalists for his investigations. The attack exploited a firmware flaw in Coinkite's Coldcard Mk3 hardware wallets (versions 4.0.1 to 4.1.9), causing some devices to generate guessable seed phrases. The hacker, potentially using automated tools or AI, drained funds from thousands of inactive addresses in multiple waves starting July 30th. Coinkite's incident response sparked separate controversy when the company emailed customers using addresses stored indefinitely, contradicting prior claims about data deletion policies. This has damaged trust in self-custody solutions. With ZachXBT stepping back, tracking the stolen 1,367 BTC falls largely to firms like Galaxy Research. The vulnerability may affect seeds generated over the past four years, requiring users to upgrade firmware and generate new seeds for safety.

cryptonews.ru2 giorni fa 12:05

ZachXBT Refuses to Track $88M Coldcard Hack

cryptonews.ru2 giorni fa 12:05

Samson Mow Shares 5 Urgent Recommendations for Coldcard Users Facing Losses

Samson Mow, CEO of JAN3, shares five urgent recommendations for Coldcard users affected by losses due to a Random Number Generator (RNG) vulnerability. He emphasizes documenting all details (wallet addresses, dates, firmware versions, transaction info) for a proper incident report. Users are advised to file a police report with cybercrime units or agencies like the FBI's IC3 and to monitor coordinated efforts to track stolen funds. Mow strongly warns against destroying the affected Coldcard device or seed phrase, as they may be needed to prove ownership if stolen bitcoin is frozen on an exchange. He also cautions victims to ignore fraudulent recovery service offers that request upfront payments or sensitive wallet information. The incident highlights broader self-custody security lessons. Mow stresses minimizing single points of failure by using multi-vendor, multi-signature setups instead of relying on a single hardware provider. He acknowledges self-custody is complex and urges the community to be less critical of those using custodians or ETFs, as each storage method involves trade-offs. Coinkite, the maker of Coldcard, has issued a security advisory urging users of affected devices to update firmware, generate new seeds, and move funds if their seed was created on vulnerable versions. The aftermath includes potential legal action against Coinkite by affected users and an unsolicited blockchain message to the attacker offering money-laundering services.

cryptonews.ru2 giorni fa 09:32

Samson Mow Shares 5 Urgent Recommendations for Coldcard Users Facing Losses

cryptonews.ru2 giorni fa 09:32

Trezor: If You Don't Have the Keys, You Don't Own the Bitcoin

The article argues that owning a promise or right to Bitcoin (e.g., through an exchange, broker, or ETF) is not the same as truly owning the asset, as access can be revoked by third parties due to regulation, bankruptcy, or policy changes. It emphasizes the importance of self-custody, where the user holds their private keys and has full control, eliminating counterparty risk. It highlights the launch of the first Trezor hardware wallet 12 years ago, which solved the problem of secure self-custody by keeping keys offline. While technology has made self-custody user-friendly, the main barrier now is a lack of awareness and trust, with many users discouraged from holding their own keys. Recent trends like ETFs and regulatory actions in Europe illustrate the risks of trusting intermediaries. The conclusion is that self-custody is the secure and simple answer, and the industry's focus should be on making it more accessible and understood, empowering users to take control before they learn its importance through loss.

cryptonews.ru07/29 17:42

Trezor: If You Don't Have the Keys, You Don't Own the Bitcoin

cryptonews.ru07/29 17:42

U.S. State Governments Accelerate Deployment of Crypto Infrastructure While Washington Moves Slowly at the Federal Level

While the crypto policy debate has long centered on Washington D.C., state governments are now driving some of the most influential developments. New Hampshire's new Blockchain Bill of Rights provides legal protections for digital asset users, including rights to self-custody and a dedicated court channel for blockchain disputes, building comprehensive legal infrastructure. Texas is moving beyond legislation into practical execution, having allocated funds for a strategic Bitcoin reserve and establishing administrative frameworks for its custody and management, creating a replicable operational model. Wyoming demonstrates that state leadership is an ongoing process; even after a bitcoin investment proposal failed, it advanced other innovations like launching the first U.S. state-issued stable token. In contrast, federal progress remains slow, with the CLARITY Act stalled in the Senate despite committee approval. States cannot solve all national issues like regulatory jurisdiction, but they are actively testing and implementing policies, generating momentum and practical data without waiting for federal consensus.

Foresight News07/20 10:03

U.S. State Governments Accelerate Deployment of Crypto Infrastructure While Washington Moves Slowly at the Federal Level

Foresight News07/20 10:03

ZachXBT Calls Hardware Wallets “Complete Garbage,” Labels Ledger the ‘Worst’ Crypto Wallet

Blockchain researcher ZachXBT criticizes hardware wallets, labeling them "complete garbage" and specifically targeting Ledger as the worst, arguing their frequent software updates increase security risks rather than enhancing safety. He points to major hacks, like a fake Ledger app stealing $9.5 million and a social engineering attack costing over $282 million, as evidence that threats often target user behavior, not the hardware itself. As an alternative for experienced users, ZachXBT suggests using a dedicated, factory-reset iPhone for crypto storage, citing Apple's Secure Enclave and app sandboxing. However, he acknowledges that smartphones, as online devices, cannot match the isolation of traditional cold wallets.

TheNewsCrypto07/16 09:03

ZachXBT Calls Hardware Wallets “Complete Garbage,” Labels Ledger the ‘Worst’ Crypto Wallet

TheNewsCrypto07/16 09:03

活动图片

Project Updatesright-arrow