COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft

Sunday, August 2, 2026 at 09:14 PM UTC·Source: BleepingComputer

Updated: Sunday, August 2, 2026 at 10:00 PM UTC

Executive Summary

A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]

Analysis

Source Attribution

Originally published by BleepingComputer on Aug 2, 2026.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-18589 — A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the...

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used. The affected component should be upgraded. The vendor was contacted early, responded in a very prof

CVE-2026-18589

43m agoNIST NVD

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-18588 — A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affect...

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed v

CVE-2026-18588

43m agoNIST NVD

MEDIUMVulnerability

Weekly Update 515

Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just

7h agoTroy Hunt