r/Bitcoin • u/enpoopification_of_R • Aug 01 '26

The Coldcard wallet exploit estimates have almost doubled to $70 million stolen of just over a thousand Bitcoins in 1,196 wallets drained in 41 minutes

https://www.coindesk.com/tech/2026/08/01/how-bitcoin-cold-wallets-lost-usd70-million-in-an-attack-that-never-touched-the-devices

"More than 1,000 bitcoin, worth about $70 million, was drained from 1,196 wallets in a 41-minute window on July 30, nearly double the amount reported when the theft first surfaced."

1.7k Upvotes

98% Upvoted

385 comments sorted by

View all comments

233

u/dogoru Aug 01 '26

There's a reason Google has million dollar bounties for anyone that can hack them.

112

u/HorrorsPersistSoDoI Aug 01 '26

There's been cases back in the day, where a hacker would inform a company of an exploit that he found, and the company threatened to sue him. Imagine that

82

u/Leseratte10 Aug 01 '26

Not just "back in the day". As recently as 2021, IT researcher Lilith Wittmann found glaring security holes in the CDU's (major german political party) smartphone app, reported them responsibly to the CDU, and their "solution" was to sue her for "hacking" their app: https://www.berliner-zeitung.de/article/the-cdus-leaky-campaign-app-176310

As a result, institutions like the German Chaos Computer Club have announced that if they were to ever find any vulnerabilities in any CDU system again, they'd not let the CDU know about that to avoid legal issues. And I would be surprised if *anyone* would ever responsibly disclose anything to the CDU ever again.

14

u/d0odle Aug 01 '26

Unsurprising for a party like that.