A significant vulnerability has been discovered in a type of cryptocurrency wallet known as a cold wallet, which is specifically designed to be a secure option for storing bitcoin and other digital assets. Hackers have exploited this flaw to steal over $130 million in cryptocurrency from users of these wallets. The wallets, which are not connected to the internet, have been compromised due to a predictable seed phrase generation process. This has allowed threat actors to brute-force passwords and gain access to the wallets.
The attacks have been carried out by multiple groups of hackers, who have gained access to the wallets and continue to drain funds in an ongoing theft. The wallets in question are considered "cold" because they are not connected to the internet or any other device, and users' keys or seed phrases exist entirely offline. In contrast, "hot" wallets are connected to the internet and are typically considered a greater security risk for hacks, theft, malware, and ransomware.
The vulnerability that has been exploited is a significant one, as it has allowed hackers to guess passwords via trial and error and gain access to the wallets. This has resulted in a large number of attacks, with over 200 crypto attacks carried out between January and July of this year, resulting in losses of $972 million. While this is an increase in the number of events, the total amount stolen is significantly lower than in the first six months of 2025.
To protect their cryptocurrency wallets, users are advised to install available updates to their devices and migrate their wallets to a new seed phrase. Using a cold wallet can provide greater protection, but it is also recommended to consider a diversified storage strategy for cryptocurrency and to leave minimal assets in hot wallets at any given time. This can help to minimize the risk of loss if one wallet is compromised.
The manufacturer of the affected wallets has issued a security advisory, which provides instructions for users to update their devices and migrate their wallets to a new seed phrase. Users are urged to follow these instructions to protect their assets and prevent further losses. By taking these steps, users can help to ensure the security of their cryptocurrency and prevent hackers from gaining access to their wallets.
