dca

Bitcoin supporter and investor Fred Krueger tweeted that he plans to propose a $1 million bet to podcast host Jason Calacanis, stating that Bitcoin will surpass its historical high of $126,210.5 by October 28, 2036.Krueger stated that both parties could each deposit $1 million into an independent escrow account, using an escrow agent and objective price oracle agreed upon by both parties. If Bitcoin reaches a new high before the deadline, Krueger wins, and the bet ends immediately; otherwise, Calacanis wins, and the settlement will occur on October 28, 2036. Jason replied suggesting to change the bet to the next 12 months.

Famous American angel investor and co-host of the All-In podcast, Jason Calacanis, urged his fans to sell Bitcoin and invest in artificial intelligence instead.He stated on Tuesday that the brutal year for Bitcoin has just begun and made three predictions: the outflow of funds from Bitcoin ETFs will continue; within the next 12 months, the price of Bitcoin will test the low of $57,000 again; Bitcoin will never break its all-time high again.Jason Calacanis said, "Sell Bitcoin directly and turn to the field of superintelligence. The former has almost no value, while the latter can bring unlimited upside potential for humanity."

Coldcard hardware wallet manufacturer Coinkite and its co-founders Rodolfo Novak and Peter D. Gray are facing a class-action lawsuit in Ontario, Canada. The lawsuit alleges that the standard firmware used by the Coldcard hardware wallet since around March 2021 has fundamental flaws, as it does not utilize a true random number generator but instead relies on a predictable software pseudo-random number generator, which could lead to the mnemonic phrases being reproduced and the Bitcoin held by users being at risk of unauthorized access.The lawsuit seeks class certification and claims that Coinkite violated the Consumer Protection Act and the Sale of Goods Act, while also involving allegations of negligence, breach of contract, and seeks damages.

Hardware wallet manufacturer COLDCARD stated that its official X account had previously posted a fake security announcement, directing users to a phishing website disguised as a wallet migration guide. The post has been deleted, but no corresponding login, session, or access records have been found.COLDCARD indicated that its credentials and offline two-factor authentication remain secure, leading to suspicions that the attacker may have gained X platform-level or administrative access, and has requested an urgent investigation by the X security team. The company also mentioned unverified reports of X administrator accounts being sold on the dark web, but no connection to this incident has been found.

According to official social media news, Huobi HTX will hold a themed live broadcast today at 20:00 titled "Market Betting on December Rate Hike: Can BTC Withstand This Round of Impact?" At that time, crypto KOLs such as Sister Mao, AlanSun, Aiden, and Crypto.0824 will engage in an in-depth discussion on the Federal Reserve's monetary policy expectations, changes in macro liquidity, and recent market trends of BTC. The focus will be on analyzing the potential impact of the rising expectations for a rate hike in December on the crypto market, as well as BTC's key support levels, long and short positions under macro pressure, and the subsequent evolution of market trends, providing investors with multi-dimensional references for market trend analysis.

According to monitoring by the head of Galaxy Research, the COLDCARD Seed Entropy theft incident has resulted in 1,830 BTC being stolen, involving three rounds of attacks and over 30 smaller related signs.A total of 256 victims have reported their situations to GLXY Research, with a median loss of 1.1 BTC, and the tracking of the attackers is still ongoing.

According to Bitcoin News monitoring, this batch of Bitcoin is worth over 4 million dollars, accounting for about 2.8% of the total Bitcoin related to the Coldcard vulnerability. Crypto Recovery Trust will verify the ownership of the funds and attempt to return them.Alex Thorn, head of research at Galaxy Digital, stated that another 3.0134 BTC was transferred to that address in the same transaction, but its source has not yet been confirmed.

White hat actors transferred 40.71 bitcoins related to the Coldcard vulnerability into a single transaction, valued at approximately 3.31 million dollars. This transaction aggregated funds from 11 addresses and included OP_RETURN information pointing to the Crypto Recovery Trust.Alex Thorn, head of Galaxy Research, revealed that a larger aggregation transferred a total of 52.37 bitcoins, involving multiple clusters of attacker addresses, accounting for about 2.8% of the funds involved in the vulnerability. A firmware flaw in Coldcard devices from March 2021 led to insufficient randomness in the mnemonic phrases, with the peak amount of funds involved being approximately 130 million dollars.

According to the monitoring by the head of Galaxy Research, the Coldcard white hat funds will come from the merger of 52.37 BTC from Wave 2, Footprints AA, AU, and AX into a new address, which recorded the OP_RETURN message "claim:cryptorecoverytrust dot com" in block number 967,948.These white hat funds account for 2.8% of the Coldcard vulnerability attack funds.

The firmware vulnerability of the hardware wallet Coldcard in 2021 led to insufficient randomness in some recovery seeds. Since July 30, attackers have transferred approximately 1,600 to 1,800 Bitcoins from affected wallets, involving thousands of addresses, with a valuation exceeding 100 million dollars. Coldcard manufacturer Coinkite stated that it must be assumed that someone is using AI to review its public firmware. This vulnerability has existed for about five years, and whether AI was involved in the related attacks has not been confirmed.Shielded Labs researcher Taylor Hornby used Claude Opus 4.8 audit agent to discover a vulnerability in the Zcash Orchard shielded pool circuit that began in 2022, which could generate an unlimited amount of counterfeit ZEC without detection during testing. Developers completed the fix within a few days, and no theft of coins has been confirmed.Blockchain analysis company Chainalysis statistics show that the on-chain write volume carrying malware instructions and command control information has increased from an average of about 2.06 times to 11.1 times daily, a growth of 440%.

According to Bitcoin News monitoring, DART stated that it, along with independent white hat researchers, has recovered over 50 BTC from wallets affected by the COLDCARD entropy vulnerability, completing the transfer before malicious attackers could steal them. DART is a digital asset recovery organization that collaborates with white hat researchers to protect vulnerable funds and coordinates their legal return to the owners.The white hat researchers did not request a bounty and will return the Bitcoin to the owners. The recovered BTC has been transferred to the Crypto Recovery Trust. This trust is a dedicated statutory trust established under Wyoming state law to hold recovered digital assets and return them after confirming and verifying the legitimate owners.The trust will document the recovery process, separating the BTC from DART and the researchers' funds, conducting blockchain analysis, ownership verification, and sanctions screening, and providing a legal return process for verified owners. If there is a dispute over ownership, or if the related funds are involved in sanctions or criminal proceedings, the BTC will be handled according to applicable legal procedures. DART stated that other vulnerable assets and recovery leads are still under review.

According to official social media news, Huobi HTX will hold a themed live broadcast today at 8 PM. DaDa, Zhengrong Says, Crypto Master Brother, Grace, and others will participate in the live broadcast.The live broadcast will discuss the latest U.S. employment data, CPI trends, and the Federal Reserve's policy expectations for September, as well as current market liquidity, funding sentiment, and content related to the $80,000 threshold for BTC.

According to Bitcoin News monitoring, Coldcard thieves are prioritizing the emptying of the largest portion of the third wave vaults. Galaxy Research indicates that these wallets have transferred out 97.09 BTC, worth approximately 7.7 million dollars, accounting for about 45% of the assets in this batch.The attackers created 293 2/2 vaults themselves, and had transferred some tokens through THORChain on September 2, subsequently moving them into multiple rounds of CoinJoin over the weekend. The vulnerability originated from a firmware flaw in 2021, which reduced the seed entropy to a minimum of 40 bits. Of the tokens stolen in this exploit, approximately 82% have not yet been transferred.

According to a report by Decrypt, Galaxy Research stated that the third wave of attackers on the Coldcard hardware wallet has recently transferred 97.09 BTC, worth approximately 7.7 million dollars at current prices, accounting for about 45% of the stolen Bitcoin in this wave.Among them, the attackers transferred about 20.5 BTC to Ethereum via THORChain cross-chain on September 2; subsequently, they moved some funds into the CoinJoin mixing process to increase the difficulty of tracking the funds. Currently, 11 of the 293 2-of-2 multi-signature addresses established by the attackers in the third wave have been emptied.The report indicated that this Coldcard security incident originated from a firmware vulnerability introduced in 2021, which significantly reduced the randomness of wallet mnemonic phrase generation, allowing attackers to potentially reconstruct private keys offline and steal funds. As of now, approximately 82% of the stolen BTC in the entire Coldcard attack incident has not yet been transferred.Galaxy Research believes that if the newly discovered suspected victim addresses are included in the statistics, the total amount of stolen BTC may reach about 1,806, worth approximately 144 million dollars.

Galaxy Research published that the attackers in the Coldcard "Wave 3" attack are still continuously transferring the stolen funds. During this phase, the attackers created 293 2-of-2 multi-signature wallets for each victim's assets. The first batch of funds was transferred across chains to Ethereum via THORChain; the latest round of transfers has begun entering the CoinJoin mixing process.Currently, the Wave 3 attackers are processing the largest amounts of stolen funds in order of the stolen amount, having sequentially transferred the funds from wallets ranked 1 to 11. The next 10 wallets that have not yet been transferred hold a total of 30.81 BTC, while wallets ranked 61 to 293 hold a total of 33.77 BTC. So far, the attackers have transferred about 45% of the stolen assets from this exploit, with funds flowing to Ethereum (via THORChain) or entering CoinJoin mixing transactions. Additionally, this fund transfer has revealed a previously unknown wallet: 58 addresses jointly spent in a 2-of-2 multi-signature format identical to that of Wave 3, and these were further transferred by the Wave 3 attackers to a jump address that funds CoinJoin.The on-chain analysis team currently marks this wallet as "cause = open," but believes it likely also belongs to Coldcard victims, which means the number of wallets involved in Wave 3 may increase to 294, raising the previously reported total amount stolen from the Coldcard vulnerability to approximately 1806 BTC. Currently, about 82% of the stolen BTC remains in addresses initially controlled by the attackers, while about 18% has been transferred, with the flow of funds indicating that it may be undergoing laundering processes.

Bitcoin News posted on the X platform that Coldcard is replenishing dealer inventory in batches as new devices are produced. About a month ago, Coldcard's entropy vulnerability led to the theft of over 100 million dollars worth of Bitcoin from users; the company stated that several dealers have applied for additional inventory, and the devices continue to sell.