NewsSOS
Galaxy said at least 15 separate attackers exploited a vulnerability in Coldcard. Dragonfly's managing partner characterized the exposure as one that $2 worth of AI hardening could have prevented.
Scope of exploitation Fifteen distinct threat actors is the floor count Galaxy reported. The firm's phrasing, "at least," leaves open the possibility of a higher final number.
Galaxy did not disclose cumulative losses, attacker identities, or the technical mechanism of the flaw in the materials cited.
The cost-of-prevention argument Dragonfly's managing partner offered the starkest framing of the incident. The partner said the vulnerability was avoidable for roughly $2 applied to AI hardening.
Keep reading