Galaxy’s Alex Thorn has warned of a suspected fourth Coldcard attack wave impacting 388.93 BTC from 462 addresses.

Bitcoin security experts said the unexplained $38 million wallet drain may involve flawed seed-generation entropy, though the cause and any Coldcard link remain unconfirmed.

Coinkite disclosed a Coldcard firmware flaw dating to 2021 that let an attacker drain 594 BTC worth $38M from nearly 500 wallets in under 30

Over $70 million in Bitcoin has been pinched. Coldcard has since urged its users to take precautions.