Ledger, Trezor say ‘funds are safe’ after Coldcard flaw helps hacker steal 38M Bitcoin
Bitcoin hardware wallet providers Ledger and Trezor have distanced themselves from Coinkites Coldcard $38M exploit. An unfortunate code flaw within Coldcards firmware allowed an attacker to steal 38M worth of BTC or more from the hardware wallet. Since Coldcard shares part of the hardware design involving the True Random Number Generator (TRNG) with other providers, investors were worried that other wallets could also be at risk. However, Ledger clarified that it uses a slightly more secure design, maintaining that their Bitcoin hardware wallets were “not affected” by Coldcards flaw. The firm added that it uses a 256-bit mathematical complexity system (entropy), which makes seed phrases difficult to crack. On the contrary, Coldcard‘s flaw downgraded Coinkite’s system from a 128-bit to a guessable 40-bit system, which could easily be cracked using brute force. Trezor, another Bitcoin hardware provider, also assured its users that they should not be alarmed about the Coldcard incident. Trezor users: your funds are safe. The recent Coldcard issue is limited to their own custom firmware and how some of their devices generated randomness. Trezor does not share that code. BTC dumps 3% to 2-week low after Coldcard exploit Despite the assurance, the Coldcard exploit sparked broader fear about safety on hardware wallets and self-custody. According to TaprootWizards









