根据区块公司的工程团队指出，此漏洞源自于 Coinkite 随机数生成器的瑕疵。在某些情况下，系统会使用设备序号等简单数值来生成种子助记词，导致骇客能够轻易预测并系统性地耗尽用户钱包。
尽管 2026 年上半年的加密货币遭窃总额较去年同期有所下降，但骇客攻击次数却创下历史新高。这起事件不仅突显了离线储存的潜在风险，也让许多受害者对加密货币及硬体钱包技术失去信心。
Hackers recently exploited a software flaw in Coldcard hardware wallets issued by the Canadian company Coinkite, stealing over $110 million worth of Bitcoin from thousands of accounts. This incident caused massive losses for investors who believed cold wallets were the safest storage option. (Key numbers: 1.1)
According to Block Inc.'s engineering team, the vulnerability originated from a flaw in Coinkite's random-number generator. Under certain conditions, the system used simple values like device serial numbers to generate seed phrases, allowing attackers to easily predict them and systematically drain user wallets.
Although the total amount of stolen cryptocurrency in the first half of 2026 decreased compared to the previous year, the number of hacking incidents reached a record high. This breach highlights the potential risks of offline storage and has caused many victims to lose faith in cryptocurrency and hardware wallet technologies.