INCIDENT EVIDENCE GRAPH
Epic Disaster: AI Finds a ColdCard Wallet Vulnerability in Just 8 Minutes Because Engineers Took Shortcuts in the Code
#Cryptocurrency Epic disaster: AI took only 8 minutes to find a vulnerability in ColdCard wallets, rooted in engineers taking shortcuts while writing code. Firmware code analysis showed that in 2021, a ColdCard engineer encountered an error while writing the firmware. Instead of carefully analyzing the underlying cause, the engineer chose to disable the wallet's built-in hardware random-number generator. After it was disabled, the wallet defaulted to software-based random numbers, and this unusual change was not detected in subsequent audits until hackers began exploiting the vulnerability to loot wallets. Read more: https://ourl.co/114175
- Victim: ColdCard wallet users
- Actor: hackers
- Method: Exploitation of wallets defaulting to software-generated randomness after the built-in hardware random-number generator was disabled