xxx
By August 5, Galaxy Research had mapped four attack waves totaling over 1,600 BTC (north of $100 million) drained from more than 5,200 addresses. The cause was not phishing or a compromised supply chain. It was a firmware bug introduced in March 2021 — five years ago — that silently routed seed generation through a weak software pseudo-random number generator instead of the hardware entropy source.
xxx