Coldcard Wallet Vulnerability: Around 1,367 BTC Stolen
Some Coldcard firmware releases seeded keys from a predictable software pseudo-random number generator, which means private keys could be brute-forced offline.
15 posts
Some Coldcard firmware releases seeded keys from a predictable software pseudo-random number generator, which means private keys could be brute-forced offline.

Bought a decade-old Antminer U3 for 25 yuan, then benchmarked CPU, RTX 2080 Ti and Bitaxe Gamma 601 mining BTCC SHA-256, and compared PPLNS, SOLO and AIRDROP pool modes.

Swiss-based crypto asset management platform SwissBorg has confirmed a major security incident: roughly 192,600 SOL were lost, worth over $41 million. The breach occurred on August 9, 2025, tied to a compromised API provided by its third-party staking infrastructure partner Kiln, which let an attacker access the staking wallet and move the assets without authorization.

Starting at 13:16 UTC on September 8, a series of packages pushed to npm appeared to contain malicious code. The attack is highly targeted — a large-scale campaign aimed primarily at Web3 users.

This afternoon my Ethereum address monitoring suddenly fired off alerts: two outgoing transactions I never made. I was stunned — I hadn't done anything, it wasn't me. Was my wallet stolen? I rushed to check what those transactions actually did. After asking for help on V2EX I learned this is an 'address poisoning' attack, and I'm sharing what I learned so everyone can stay alert.

Can you still mine with a GPU in 2025? What are the returns? I recently tried mining with an NVIDIA RTX 2080 Ti, and after a few days of mining I'm here to break down whether it's still viable.

GitHub Actions is a free CI/CD service, and it's now being abused to mine cryptocurrency. I introduce what GitHub Actions is in another post, so I won't repeat it here — see "First look at GitHub Actions Workflows".

According to the latest quotes from Huobi, the RMB price of Bitcoin dropped sharply by more than 1,000 yuan in a short period, falling below 28,000 yuan again and at one point dropping to 27,520 yuan per coin. Earlier, media reported that Chinese regulators were considering banning Bitcoin trading platforms.

On the afternoon of September 4, the People's Bank of China published a notice on its website stating that recently, domestic financing activities conducted through the issuance of tokens, including initial coin offerings (ICO), have emerged in large numbers, with speculative hype rampant, suspected of engaging in illegal financial activities and seriously disrupting the economic and financial order.

Just as Bitcoin returned above 30,000, Satoshi Nakamoto seemingly "reappeared"! On August 30, the Bitcoin wallet believed to belong to Satoshi Nakamoto showed unusual activity: 3,000 Bitcoins mined between January 25 and 31, 2010 suddenly moved to two addresses, and it had been 7 years since the account was last operated. The account currently holds 440,000 Bitcoins, which at current market prices are worth as much as 13.2 billion yuan.
