David Schwartz Discusses Coldcard Hack Impacting Over $100 Million

David Schwartz Discusses Coldcard Hack Impacting Over $100 Million

Ripple’s Chief Technology Officer Emeritus, David Schwartz, recently addressed the significant losses resulting from the Coldcard hack, which has exceeded $100 million. This breach underscores the rare but serious risks associated with custody failures, prompting Schwartz to draw parallels between this incident and previous failures within traditional finance.

Understanding the Coldcard Breach

The Coldcard incident has raised alarms in the cryptocurrency community, with reports from Galaxy Research indicating thefts surpassing 1,596 BTC from approximately 7,300 addresses during confirmed attack waves. The losses could potentially rise to around 2,055 BTC, valued at nearly $130 million, though this figure remains unverified.

Technical Vulnerabilities Exploited

According to Schwartz, the breach was facilitated by a flaw in the seed-generation process linked to a firmware update released in March 2021. This vulnerability did not require attackers to access Coldcard devices directly; instead, it allowed them to reconstruct wallet seeds due to the software-based pseudorandom number generator being inadequately random. The affected firmware versions include Mk2 and Mk3, specifically from versions 4.0.1 through 4.1.9.

Comparisons to Traditional Financial Failures

Schwartz compared the Coldcard breach to the 2011 MF Global collapse, noting how both incidents highlight unexpected losses stemming from technical failures. He emphasized that while hardware wallets are designed for self-custody and allow users to secure their private keys independently, they still rely on proper functioning of their hardware and software.

He remarked on a significant distinction between traditional finance and cryptocurrency self-custody: clients of regulated financial institutions often have access to recovery mechanisms, such as insurance and bankruptcy proceedings, which are unavailable to affected Coldcard users.

Recommended Actions for Coldcard Users

In light of the breach, Coinkite has advised affected Coldcard users to update their devices to firmware version 4.2.0 or later and to generate completely new wallet seeds. Transfer of Bitcoin to these new wallets is strongly recommended to mitigate risks. Users are instructed to test the new wallet with a small transaction prior to moving significant funds.

Conclusion

This breach serves as a stark reminder that while hardware wallets enhance security by reducing online attack surfaces, they do not eliminate risks associated with firmware vulnerabilities or seed generation. Coldcard owners are urged to take swift action in securing their digital assets to safeguard against potential losses.