
A Coldcard wallet flaw was linked to 1,082.65 Bitcoin (CRYPTO), worth about $70.2 million, being stolen.
Galaxy Research raised its loss estimate from $38 million after mapping 1,196 addresses drained within 41 minutes.
“Nothing is 100%,” said Binance founder Changpeng Zhao while warning that hardware wallets can still contain bugs.
Zhao suggested spreading funds across several wallets, while acknowledging that this approach also carries risks.
Coinkite released emergency fixes and urged affected users to move funds using newly generated seed phrases.
Decrypt reported the flaw came from March 2021 firmware that used a software fallback when generating wallet seeds.
Galaxy Research said the stolen Bitcoin was quickly consolidated into several addresses and had not moved when reported.
At the time of reporting, Bitcoin price was $62,986.64.
Bitcoin (CRYPTO:BTC) hardware wallet maker Coldcard has warned users after attackers stole 594 BTC from wallets created using compromised Coldcard Mk3 firmware.