Galaxy Research flagged a fourth wave of thefts targeting Coldcard hardware wallets, with roughly 389 Bitcoin swept from 462 addresses in hours. A 2021 firmware flaw that weakened seed randomness left the private keys guessable, and total losses now exceed $88 million.