2 CVEs published in the last four months and 4 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2025-46597 | 7.5 | high | bitcoin core | Bitcoin Core 0.13.0 through 29.x has an integer overflow. | 217d ago |
| CVE-2025-46598 | 5.3 | medium | bitcoin core | Bitcoin Core through 29.0 allows a denial of service via a crafted transaction. | 217d ago |
A recent report by Galaxy Research has linked a suspected theft of approximately 1,367.05 Bitcoin, valued at nearly $89 million, to a weakness in the seed generation process of COLDCARD hardware wallets. The research suggests that seeds generated on these devices may have been susceptible to compromise, leading to the significant loss of funds.
Recent reports indicate a growing trend among Bitcoin businesses to migrate their operations to dedicated Virtual Private Server (VPS) infrastructure. This shift is reportedly driven by the complex and diverse technical requirements inherent in operating various services within the cryptocurrency ecosystem, which often extend far beyond the scope of a basic web presence.
A vulnerability in the random number generation (RNG) component of COLDCARD hardware wallet firmware is suspected to be linked to the theft of approximately $88.6 million in Bitcoin from thousands of wallets. The flaw allowed attackers to potentially reconstruct wallet seeds generated by affected devices.
A significant theft of Bitcoin, totaling approximately $70.2 million at the time of the incident, has been linked to a reported firmware vulnerability in the Coldcard hardware wallet. The attack, which occurred on July 30, saw an attacker drain 1,196 Bitcoin addresses over a period of 41 minutes, acquiring 1,082.65 BTC. Analysis by Galaxy Research reportedly mapped this rapid sweep and…