Coldcard Firmware Bug Drains 1,816 BTC From 5,200+ Addresses

iconNS3
Share
This is the logo of the coin.
BTC
$64,933.20-0.03%
AI summary iconSummary
BTC news today reveals a firmware flaw in Coldcard hardware wallets enabled attackers to guess seed phrases and drain 1,816 BTC from over 5,200 addresses in four waves. Users reported drained wallets within minutes, even for offline devices. Coinkite issued a firmware fix, stopped shipments, and destroyed remaining affected units. The incident shows how seed-generation flaws can expose private keys in self-custody tools. BTC update: Coldcard users urged to upgrade immediately.

Key Point

A firmware bug made Coldcard-generated seeds guessable and attackers swept roughly 1,816 BTC from more than 5,200 addresses across four coordinated waves. Jonathan Goodman said every wallet he had was emptied in seven minutes on July 29, including 18.25 BTC held on a Coldcard that had never touched the internet. Affected users are racing to move coins because the flaw allows attackers to reproduce private keys. Tim Lamb said his 2 BTC was drained before he could restore the wallet with help from a neighbor. Coinkite released fixed firmware for every model, halted shipments, and destroyed remaining inventory carrying affected firmware.

Why it matters: The breach could weaken confidence in self-custody tools because seed-generation failures can turn offline storage into direct key exposure.

Market Sentiment

Bearish, Stress-on, Tech-driven, De-risking.

Reason: The Coldcard firmware bug made generated seeds guessable, so investors may reduce trust in affected self-custody setups.

Similar Past Cases

In June 2023, Atomic Wallet users lost more than $35 million after unauthorized withdrawals, and Atomic said fewer than 1% of monthly active users were affected. The incident pushed users toward urgent transfer and tracking steps while the cause remained unclear. (Fortune) The key difference is that Atomic Wallet was a hot wallet incident, while the Coldcard case involves a hardware wallet seed-generation flaw.

Ripple Effect

A seed-generation flaw can spread from individual wallet losses to broader self-custody distrust through key-rotation urgency and wallet migration. If exposed seeds remain funded, then attackers may continue draining wallets before users complete recovery steps. If users cannot verify whether a seed is affected, then conservative custody behavior may increase across hardware wallet users.

Opportunities & Risks

Opportunities: If users verify fixed firmware and move funds to newly generated unaffected keys, then rotation becomes a risk-reduction signal for exposed wallets.

Risks: If affected seeds remain funded, then reducing exposure to those wallets limits downside from further coordinated sweeps.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.