Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Back Thehackernews

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Thehackernews •[email protected] (The Hacker News) • August 1, 2026

Share: View original

Learn how 300 enterprise leaders are managing AI-driven open-source risk, remediation debt, and governance at scale.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coldcard Firmware Flaw Leads to $88 Million Bitcoin Theft A significant vulnerability in Coldcard hardware wallets allowed attackers to exploit weak seed generation, resulting in the theft of approximately 1,367 BTC (around $88.6 million) from 4,585 addresses. The exploit, which began on July 30, 2026, involved a firmware flaw that bypassed the device's hardware random number generator, leading to predictable seed phrases. Initial reports indicated losses of about 594 BTC worth $38 million, but further analysis revealed the total theft was much larger. The attack was executed in multiple waves, with the first two showing similar transaction patterns, suggesting a coordinated effort. Affected users are urged to migrate their funds to new wallets, as simply updating firmware does not secure previously generated seeds. The ongoing nature of the theft has raised alarms about the security of hardware wallets and self-custody practices in the cryptocurrency space. 87 sources 70

Extracted Entities

Companies (1)

Platforms (1)

Coldcard Hardware Wallet