A security flaw in a popular Bitcoin hardware wallet has reportedly enabled the theft of more than $144 million across roughly 7,300 wallets, with researchers saying the attacks are ongoing.

The cryptocurrency heist affects Coldcard – a small, physical device which stores private Bitcoin keys offline and signs Bitcoin transactions without the keys touching the internet.

Though designed expressly for security and sovereign ownership, hackers have reportedly exploited a security-breaking vulnerability in the device to siphon more than 1,596 Bitcoin across a reported 7,300 Coldcard wallets.

Researchers at financial services company Galaxy Digital noticed the initial theft which took place across a 41-minute window on 30 July.

Since…