BTC $62,997.71 -0.60%
ETH $1,860.32 -0.76%
BNB $583.97 +0.51%
XRP $1.07 -0.42%
SOL $72.93 -0.18%
TRX $0.3261 -0.54%
DOGE $0.0699 -0.08%
ADA $0.1858 +3.49%
BCH $210.59 +0.76%
LINK $8.27 +0.34%
HYPE $52.17 -1.15%
AAVE $91.44 -0.62%
SUI $0.6869 -0.21%
XLM $0.1713 -1.39%
ZEC $476.39 +0.80%
BTC $62,997.71 -0.60%
ETH $1,860.32 -0.76%
BNB $583.97 +0.51%
XRP $1.07 -0.42%
SOL $72.93 -0.18%
TRX $0.3261 -0.54%
DOGE $0.0699 -0.08%
ADA $0.1858 +3.49%
BCH $210.59 +0.76%
LINK $8.27 +0.34%
HYPE $52.17 -1.15%
AAVE $91.44 -0.62%
SUI $0.6869 -0.21%
XLM $0.1713 -1.39%
ZEC $476.39 +0.80%

cto

All
Article
Flash

Galaxy Research Director: Coldcard attack investigation陷入 AI dilemma, forced to turn to Chinese open-source models to track stolen funds

Galaxy Research Research Director Alex Thorn stated that the attack targeting Coldcard wallet address generation is still ongoing. They are currently continuing to collect victim information and adding new victim addresses and attacker addresses to the investigation database.If users are still using affected Coldcard single-signature addresses, they should immediately migrate their funds. According to current investigation results, all single-signature Coldcard addresses generated after the firmware upgrade in March 2021 may ultimately be emptied by attackers; it is just a matter of time.According to Galaxy Research's analysis, the first three confirmed rounds of attacks exhibit highly programmatic characteristics, with similar attack transaction patterns. A large amount of stolen Bitcoin remains in the attackers' addresses and has not yet been transferred.At the same time, some new opportunistic attackers are emerging, transferring and laundering funds through methods such as stripping the funding chain, cross-chain services (like ThorChain), and overseas betting platforms.Additionally, Alex Thorn mentioned the limitations of AI tools in security investigations. Some large language models in the United States have restricted researchers' ability to track stolen funds, and the team has even had to turn to Chinese open-source AI models to assist in protecting user assets and conducting on-chain tracking.He finds this phenomenon "incredible" and plans to promote discussions on related issues at the government and industry levels. Alex Thorn concluded by stating that a large amount of stolen funds remains stagnant, and the team is continuously tracking relevant addresses, having shared information with relevant U.S. agencies and industry partners. He calls on the Bitcoin community to learn from this incident, strengthen self-custody security education, and raise awareness of wallet complexity.

Galaxy Research Director: Coldcard victims had 17 BTC stolen and transferred to an offshore betting platform, which refused to freeze the funds

Galaxy Research Research Director Alex Thorn tweeted that among a Coldcard attack victim holding nearly 30 BTC, 17 BTC were split and converted to ETH via THORChain, and then deposited into the offshore betting platform Duel.com.Upon tracking, this portion of funds corresponds to approximately 229.72 ETH (worth about $445,000). The victim and the research team have emailed all known addresses of Duel.com, providing all transaction and deposit information and requesting to freeze the funds, but the response stated that the victim should have the police contact them, even though the platform's anti-money laundering policy claims it implements KYC and complies with relevant laws.Thorn stated that this response is unacceptable, and most of the Western regions have passed midnight, meaning the police report cannot be advanced until at least Monday; he believes that if the platform refuses to freeze the funds after receiving notification that they originated from an ongoing cyber attack, it constitutes complicity in theft.Since Duel.com's X account has been banned, Thorn turned to @ several individuals associated with the platform, urging them to push the platform to take the correct actions, and stated that if the funds are not frozen, the platform will face significant legal action.
app_icon
ChainCatcher Building the Web3 world with innovations.