Hardware Wallet Flaw Leads to $38M Bitcoin Theft in 25 Minutes
A critical flaw in hardware wallet seed generation allowed attackers to drain 594 BTC in less than half an hour.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- A randomness flaw in hardware wallet seed generation resulted in the loss of 594 BTC.
- Attackers swept roughly $38 million worth of Bitcoin in a single 25-minute window.
- The bug made theoretically unguessable seed phrases predictable enough to brute-force.
594 BTC. Gone in 25 minutes. A fatal randomness bug inside a hardware wallet turned supposedly unguessable seed phrases into sitting ducks, letting attackers snatch the entire stash before anyone could react.
That Bitcoin was worth roughly $38 million when the swift sweep went down. Hardware wallets rely on pure randomness—entropy—to build recovery seeds no human or computer can guess. Break that entropy and the math guarding your money collapses. The pool of possible keys shrinks fast, making private keys easy to calculate and drain.
A 25-Minute Blitz
Nobody moves that fast manually—automated scripts ran this show. Attackers clearly spotted the flaw in the seed generation code, mapped out the weak key pairs, and sat on the blockchain like hawks. Once triggered, their routines wiped out the affected wallets before users even realized they had a problem.
Why it matters
Hardware wallets get sold as the ultimate fortress for crypto. But cold storage is only as tough as the math behind it. If a device uses bad randomness to generate your private keys, keeping them offline gives you zero real protection. If you're on an affected setup, move your funds to a new wallet built on verified entropy immediately.
Source: CoinDesk
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Alex Rivera
Alex covers crypto markets and trading, testing every platform hands-on before writing about it.
