Hackers exploited a 2021 Coldcard firmware bug to steal 1,367 BTC worth $89 million across 4,585 wallets in multiple coordinated attack waves.

A hardware wallet randomness bug turned “impossible to guess” seeds into guessable ones, and $38 million is already gone.

Coinkite said it’s likely that an attacker used AI to review previous versions of its open source firmware to uncover a vulnerability.

Over $70 million in Bitcoin has been pinched. Coldcard has since urged its users to take precautions.