FOUNDATION

ElizaOS founder Shaw says ai16z token is dead as foundation winds down
Coldcard
2026-08-04 10:52:57

Coldcard exploit sparks phishing wave as potential losses approach $130 million

Phishing activity aimed at hardware wallet users is picking up after disclosure of the Coldcard firmware flaw, with Trezor, Foundation and security firm Proofpoint all flagging new scams tied to the incident. Trezor said it has already seen more phishing attempts and reminded users that wallet backups should only ever be entered on the device itself, while stressing that its own hardware is not affected. Foundation reported emails impersonating the company and pushing victims to fake websites and malicious downloads, adding that it will never ask for a recovery phrase or tell users to install software to secure a wallet. Proofpoint said attackers are leaning on a “hardware audit” narrative lifted from the Coldcard incident. In the campaign it tracked on Monday, spoofed Coldcard emails directed recipients to a cloned site with a “Start Hardware Audit” button. Clicking it downloaded a GitHub-hosted batch file that installed ScreenConnect, a legitimate remote-access tool that can open the door to data theft, financial theft or follow-on malware, including ransomware. The fake site also featured a live chat operated by a human who guided victims through installation. Galaxy Research said the underlying flaw traces back to a March 2021 firmware build and has already been used in three confirmed theft waves since July 30, with high-confidence losses of 1,596 BTC, or more than $100 million. Including a suspected but unconfirmed fourth wave, total losses could reach $130 million.

790
Coldcard exploit sparks phishing wave as potential losses approach $130 million
SolidoMoney exploited, with about 294 million SUPRA stolen
ABC verification report says Lily Jay foundation used AI-generated charity content