Coldcard attack drains $89M from 4,585 wallets

A March 2021 Coldcard firmware flaw let attackers reproduce weak software-generated keys, draining 1,367 bitcoin, nearly $89 million, from 4,585 addresses across three waves. Galaxy Research attributes each wave to a single operator but cannot confirm one attacker behind all three.