594 BTC stolen from vulnerable Coldcard Mk3 wallets

Coinkite has issued a warning to Coldcard Mk3 wallet owners regarding a security vulnerability that could lead to the compromise of seed phrases generated on certain firmware versions. The attack resulted in the theft of about 594 BTC from roughly 500 addresses within less than 30 minutes. The issue stems from the use of predictable data during key generation in outdated firmware, which may have allowed attackers to predict seed phrases. Owners are advised to create new wallets and transfer funds to secure addresses. A comprehensive technical report on the incident's scope is currently being prepared.