The safest way to store Bitcoin just lost $115 million...
A critical vulnerability in Coldcard hardware wallets resulted in the theft of over 1,600 Bitcoin, valued at approximately $115 million, from more than 7,000 addresses starting July 30th. The breach occurred because CoinKite's firmware incorrectly prioritized a weak MicroPython random number generator over their custom secure implementation, causing seed phrases to be derived from deterministic hardware serial numbers rather than true entropy. Attackers exploited this flaw to predict private keys and drain funds without malware or phishing, exposing a fatal logic error in the device's security architecture. This incident demonstrates that even air-gapped, open-source hardware can fail catastrophically due to a single configuration oversight.
I’m headed to DEFCON!
The speaker outlines a schedule for DEFCON, the world's largest hacker conference, featuring participation in LobbyCon, Red Team Village, and Bug Bounty Village events. Key engagements include an AI hacking workshop on Friday and a panel discussion on hacking AI applications with five other experts on Saturday at 2:30 p.m. The itinerary also includes attendance at major parties hosted by Bug Crowd and TikTok's Hacker Hangout. This schedule highlights the integration of artificial intelligence into modern penetration testing and bug bounty strategies.