Galaxy Digital Holdings LtdImpact on stocks 1
Galaxy Digital Holdings LtdTheme Impact 2
Off-coverage companies 1
Coinkite's Coldcard wallet was hacked due to a firmware vulnerability that AI failed to detect, causing $130M loss.
Coinkite, the Canadian maker of hardware Bitcoin wallets, has warned that artificial intelligence cannot detect the software vulnerability that hackers used to attack the Coldcard Wallet, an offline cryptocurrency storage device, resulting in the loss of users' digital assets worth around 130 million US dollars. The vulnerability occurred in the firmware, which is the interface between two software components, not in the core code or encryption system that typically undergoes rigorous scrutiny. Coinkite revealed that it had been using AI to audit its security code all along, including in the weeks before the attack, but failed to find the flaw. After the incident, it retested with several leading AI models, and none of them detected it. The company therefore urges organizations that rely on AI for code review to urgently test the interfaces between systems. Meanwhile, Galaxy Research estimates that the attack took place in at least four waves, causing total damage of approximately 130 million US dollars.
Galaxy Digital Holdings LtdCoinkite's Coldcard wallet was hacked due to a firmware vulnerability that AI failed to detect, causing $130M loss.