Coldcard Mk3 Users Warned of Potential Fund Risks After Bitcoin Thefts

Urgent Action for Coldcard Mk3 Owners

Cryptocurrency hardware company Coinkite issued a security alert on Thursday. The warning targets users of its Coldcard Mk3 devices. It concerns seeds created on specific firmware versions. This follows reports of 594 Bitcoin being stolen.

The company advises users to take immediate action. Funds generated on Mk3 devices running firmware 4.0.1 or newer could be vulnerable. This vulnerability has been present since March 2021.

Coinkite recommends that all affected users generate a strong, unique BIP-39 passphrase. This passphrase should be created directly on their Coldcard device. After setting this new passphrase, users should transfer all their cryptocurrency holdings to new addresses. This step is crucial for securing their assets.

What Causes This Vulnerability?

The advisory comes amid growing concerns in the crypto community. Several users have reported significant losses. The total amount stolen, 594 Bitcoin, highlights the severity of the issue.

The problem stems from how certain Mk3 devices generate cryptographic seeds. These seeds are fundamental for securing cryptocurrency. A flaw in the seed generation process could make funds accessible to unauthorized parties. This specific vulnerability affects devices running firmware versions 4.0.1 and all subsequent updates.

Coinkite has not yet detailed the exact nature of the flaw. However, their strong recommendation suggests a serious underlying issue. Users are urged to prioritize these security measures.

Frequently Asked Questions

What should I do if I own a Coldcard Mk3? You should immediately create a strong, unique BIP-39 passphrase on your device. Then, move all your cryptocurrency to new addresses generated with this new passphrase.

Which firmware versions are affected? The vulnerability affects Coldcard Mk3 devices running firmware version 4.0.1 or any later version. This includes all firmware updates released since March 2021.

How much Bitcoin has been reported stolen? Reports indicate that 594 Bitcoin have been stolen due to this vulnerability. This emphasizes the importance of taking immediate protective action.