Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million
Lời nói đầu:An attacker exploiting Coldcard-generated keys has begun draining smaller wallets, with Galaxy Research reporting a third wave that took roughly 208 bitcoin from 1,912 addresses between Friday midday and Saturday morning UTC—about a tenth of a bitcoin per victim. Combined losses across all three waves now total 1,367 bitcoin, nearly $89 million, from 4,585 addresses. Unlike the first two waves, which used shared collector addresses and averaged nearly a full coin per victim, wave three sends each victims coins to its own destination, uses pay-to-witness-script-hash outputs that can carry multisignature or timelock conditions, batches about six victims per sweep, and scans only the default derivation path rather than testing multiple branches.
The attacker working through Coldcard-generated keys is now emptying wallets worth a few thousand dollars each.
Galaxy Research flagged a third wave of sweeps early Sunday, roughly 208 bitcoin drained from 1,912 addresses between Friday midday and Saturday morning UTC.
That is just over a tenth of a bitcoin per victim. The July 30 opening wave averaged close to a full coin, 1,083 bitcoin from 1,196 addresses in 41 minutes.
Observed losses across all three waves now total 1,367 bitcoin, nearly $89 million, from 4,585 addresses.
Wave three sends each victims coins to its own destination rather than the handful of shared collector addresses that made the first two easy to map, and parks them in pay-to-witness-script-hash outputs, a format that can carry multisignature or timelock conditions, instead of the plain single-key outputs used before.
It batched an average of six victims into each sweep where wave one took exactly one at a time, and it scanned only the default derivation path, the standard branch of the key tree a wallet checks first, instead of testing several branches per seed.
Miễn trừ trách nhiệm
Các ý kiến trong bài viết này chỉ thể hiện quan điểm cá nhân của tác giả và không phải lời khuyên đầu tư. Thông tin trong bài viết mang tính tham khảo và không đảm bảo tính chính xác tuyệt đối. Nền tảng không chịu trách nhiệm cho bất kỳ quyết định đầu tư nào được đưa ra dựa trên nội dung này.
