A flaw in how Coldcard hardware wallets generated their keys let an attacker sweep roughly 594 bitcoin — about $38 million — from around 500 wallets in just 25 minutes. The bug traces back to a March 2021 firmware update. CoinDesk's Jennifer Sanasie hosts "CoinDesk Daily."