Ledger就Coldcard遭黑客攻击事件警告人工智能风险

cryptonews.ru2026-08-05 tarihinde yayınlandı2026-08-05 tarihinde güncellendi

Özet

莱杰公司（Ledger）首席技术官夏尔·吉耶梅针对Coldcard硬件钱包被黑事件发出警告，指出该事件暴露了比特币存储设备中随机数生成器验证的漏洞。他强调，开源代码并不等同于经过审计的代码，此次漏洞在公开代码库中存在超过五年却未被发现。莱杰的设备采用安全元件中的硬件随机数生成器，避免了Coldcard中因软件备用路径导致的问题。 事件引发了关于人工智能在代码分析中作用的讨论。吉耶梅表示，AI工具能加速漏洞发现，但尚无公开证据表明攻击者实际使用了AI。然而，有用户在Reddit和X平台声称，Claude Code仅用8分钟就通过单次提示发现了该漏洞。风投基金Dragonfly管理合伙人哈希布·库雷希此前称，仅需2美元用AI进行代码审计即可预防此次攻击。 据Galaxy Research数据，至少15名攻击者利用了该漏洞，已确认的三波攻击造成约1亿美元损失，若包括可能的第四波，总损失可能达1.3亿美元。此外，Trezor和Foundation等硬件钱包厂商已就事件相关的钓鱼攻击发出警告，提醒用户防范冒充官方的“硬件审计”欺诈。

利用Coldcard漏洞的事件表明，有必要重新审视比特币存储设备中随机数生成器的验证机制。Ledger公司首席技术官夏尔·吉耶梅对此作出了声明，Decrypt报道了此消息。

据他所述，此次事件暴露了"开源即等于已验证代码"这种方法的局限性。这位专家指出，该错误在公开数据库中存在了五年多，但在攻击开始前一直未被发现。

"开源代码和经过验证的代码不是一回事，" Ledger首席技术官表示。

根据Ledger的文档，该公司的设备通过安全元件中的硬件随机数生成器生成256个随机比特。吉耶梅称，在这种架构中不存在软件备用路径，而这正是Coldcard出现问题的地方。

Sleep at Night Technology：Coldcard如何将用户的睡眠变为噩梦

Ledger将此次事件与人工智能工具在代码分析中日益增长的作用联系起来。吉耶梅表示，此类系统加速了漏洞的发现，无论是对攻击者还是防御者而言。然而，在撰写本文时，尚无公开证据表明攻击者确实使用了人工智能。

U.Today关注到了Reddit和X平台上的讨论。据用户声称，Claude Code在收到检查源代码的请求后，仅用大约八分钟就找到了该漏洞。

这太疯狂了

claude code仅用一次提示，在仅仅8分钟的思考后就找到了COLDCARD钱包的漏洞

我们还没准备好迎接即将到来的事情 pic.twitter.com/wh1LtEWuje

— Medusa (@MedusaOnchain) August 2, 2026

早些时候，风险投资基金Dragonfly的管理合伙人哈希布·库雷希曾表示，只需花费2美元利用人工智能检查代码，Coldcard冷钱包遭受的攻击本可以预防。

根据Galaxy Research的数据，至少有15名不同的恶意攻击者利用了该漏洞。分析师估计，经过确认的三波攻击造成的损失已达1亿美元。考虑到可能的第四波攻击，总损失可能增长至约1.3亿美元。

需要提醒的是，8月4日，硬件加密货币钱包制造商Trezor和Foundation就此次事件背景下的网络钓鱼攻击向用户发出警告。在某些案例中，诈骗者冒充制造商发送邮件，并提供所谓的"硬件审计"服务。

end-content

Trend Kriptolar

ctr
CitreaCTR
wstusdt
wrapped stUSDTWSTUSDT
apr
aPrioriAPR
ctx
Cryptex FinanceCTX
audio
AudiusAUDIO
comp
CompoundCOMP
mantra
MantraMANTRA
xvs
VenusXVS
waxl
AxelarWAXL
bill
Billions NetworkBILL
pyth
PYTH (Pyth)PYTH
rune
THORChainRUNE
brev
BrevisBREV
zrx
ZRX（0X）ZRX
cake
PancakeSwapCAKE

İlgili Sorular

QLedger的CTO就Coldcard漏洞事件发表了什么核心观点？

ALedger的CTO查尔斯·吉勒梅的核心观点是，这次事件揭示了‘代码开源就等于代码经过审计’这一观念的局限性。他指出，该漏洞在公开代码库中存在了五年多，直到被利用攻击时才被发现，因此他强调‘开源代码和经过审计的代码不是一回事’。

QColdcard钱包漏洞事件导致了多大的经济损失？

A根据Galaxy Research的数据，通过该漏洞已确认的三次攻击浪潮造成的损失估计为1亿美元。如果算上推测的第四次攻击浪潮，总损失可能上升到约1.3亿美元。

Q文章中提及的AI工具Claude Code是如何与这次漏洞事件关联的？

A文章提及，有Reddit和X平台的用户声称，AI工具Claude Code在接到检查源代码的请求后，仅用了大约8分钟就发现了Coldcard钱包的这个漏洞。这引发了关于AI在加速漏洞发现方面作用的讨论。

Q在Coldcard事件发生后，其他硬件钱包公司有什么反应？

A在事件发生后，其他硬件钱包生产商如Trezor和Foundation警告用户提防利用此事件进行的网络钓鱼攻击。有报道称，一些诈骗者冒充硬件钱包制造商发送电子邮件，以‘硬件审计’为名进行诈骗。

QLedger的设备在随机数生成方面与Coldcard有何不同，以避免类似问题？

A根据Ledger的文档，其设备通过安全芯片中的硬件随机数生成器生成256个随机比特。Ledger的CTO表示，这种架构不存在像Coldcard那样出问题的软件备用路径，从而降低了类似风险。

İlgili Okumalar

Thune to file motion for September vote on CLARITY Act bill

Republican Senate Leader John Thune plans to file a cloture petition on the Digital Asset Market Clarity (CLARITY) Act before the August recess, aiming to set up a floor vote in September. This signals GOP leadership's intent to prioritize the bill after the Senate's break. However, the bill faces hurdles: the need for 60 votes, banking lobby concerns over stablecoin yields affecting local banks, and an ongoing ethics provision negotiation with the White House requiring disclosure of crypto holdings by officials. Coinbase CEO Brian Armstrong supports the bill, stating it would foster investment and innovation. Analysts note the September timeline is tight, with only 14 working days before the October recess for midterm campaigns, making passage uncertain.

cryptonews.ru40 dk önce

Thune to file motion for September vote on CLARITY Act bill

cryptonews.ru40 dk önce

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

Bitcoin miners' pivot to artificial intelligence (AI) and high-performance computing (HPC) is transforming their business models, but investor enthusiasm for new infrastructure deals has significantly waned, indicating a more selective market as AI-hosting strategies become mainstream. An analysis shows the market reaction to AI infrastructure announcements has weakened substantially over the past two years. While the size and value of contracts have increased, the average stock price movement on announcement day has fallen from about 24% for early deals to around 10% for recent ones. The median gain has also halved. This suggests investors now place greater emphasis on execution, financing, and long-term profitability rather than just headline contract values. This cooling sentiment is evident in the reaction to specific deals. Early agreements, like those from Core Scientific and TeraWulf, triggered stock surges of 40-60%. In contrast, more recent mega-deals from companies like TeraWulf, CleanSpark, and Bitdeer resulted in much more modest gains of 5-12%, with some gains fading by market close. Stock performance reflects this shift. While demand for AI infrastructure remains high, the TEM AI Infrastructure Growth Index is down about 28.5% from its June peak, aligning with a broader pullback in related sectors like semiconductors.

cryptonews.ru42 dk önce

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

cryptonews.ru42 dk önce

Trezor: Your keys are always held by someone. And that someone should be you.

Following a recent security incident with a competing hardware wallet, this article defends the concept of self-custody and clarifies its core principles. It argues that while the specific vulnerability was serious, it represents a failure of one product, not of hardware wallets or self-custody in general. The piece cautions against overreactions like abandoning self-custody for exchanges or hastily adopting overly complex multi-signature setups for average users. The author's central argument is that someone always holds your Bitcoin keys—the only question is who. Choosing a custodian (like an exchange) shifts the risk to trusting a third party's honesty and solvency, placing you back in the system Bitcoin was designed to escape. With a hardware wallet, you trust only that the device was built correctly—a claim that can be verified due to open-source code and security audits. The stated mission is to make self-custody as simple and intuitive as possible, moving it from a niche for experts to an obvious choice for everyone. The article concludes by emphasizing that self-custody’s inherent responsibility is the very point of true ownership, and that transparency and verification, not blind trust, are what make it stronger.

cryptonews.ru44 dk önce

Trezor: Your keys are always held by someone. And that someone should be you.

cryptonews.ru44 dk önce

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

Bitcoin mining firm CleanSpark (Nasdaq: CLSK) reported Q3 FY2026 revenue of $138 million, missing Wall Street consensus estimates of $142.2 million. The figure represents a 30.5% year-over-year decline from $198 million. The company posted a net loss of $239 million ($0.89 per basic share), a stark reversal from a net profit of $257 million ($0.90 per share) in the same quarter last year. Its stock fell 5.5% on Thursday but rebounded 3% in Friday's premarket, trading above $13.10. CleanSpark is diversifying beyond Bitcoin mining, recently signing a 20-year lease with an unnamed investment-grade tech company for a 175-megawatt data center in Georgia, a deal estimated to generate $6.6 billion in contract revenue.

cryptonews.ru44 dk önce

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

cryptonews.ru44 dk önce

Two Senators Propose Exempting Trump from Crypto Business Taxes

Two U.S. Senators, Republican Thom Tillis and Democrat Ruben Gallego, have proposed an amendment that could exempt former President Donald Trump from taxes on his crypto business income for many years, potentially saving him millions. The amendment would allow Trump to avoid capital gains tax if he reinvests proceeds from asset sales and holds them until death. Trump reported $1.4 billion in income from cryptocurrency and meme coin projects for 2025. Without the deferral, he would face an immediate 20% tax on gains. As president, he is not required to divest income-generating assets. Uncertainty over an "ethical aspect," demanded by Democratic congressmen, has delayed Senate consideration of the CLARITY bill before the recess. Senate Republican leader John Thune did not file a cloture motion by August 7 to advance the vote, citing protracted negotiations with the administration. The Senate is on recess until September 14, with few sessions scheduled before the midterm elections on November 3. Reports conflict on whether Trump agreed to the ethical provisions in late July meetings with senators. Meanwhile, in early August, Senate Democratic Leader Chuck Schumer introduced a bill to create an independent anti-corruption bureau with the power to hold the U.S. president and officials accountable for illicit funds, including from cryptocurrencies.

cryptonews.ru49 dk önce

Two Senators Propose Exempting Trump from Crypto Business Taxes

cryptonews.ru49 dk önce

İşlemler

Spot

Popüler Makaleler

T Nasıl Satın Alınır

HTX.com’a hoş geldiniz! Threshold Network Token (T) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında Threshold Network Token (T) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: Threshold Network Token (T) Varlıklarınızı SaklayınThreshold Network Token (T) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: Threshold Network Token (T) Varlıklarınızla İşlem YapınHTX'in spot piyasasında Threshold Network Token (T) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

726 Toplam GörüntülenmeYayınlanma 2024.12.10Güncellenme 2026.06.02

T Nasıl Satın Alınır

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların T (T) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.

活动图片