Coldcard Hardware Wallet Compromised; 1,367 BTC Stolen in Coordinated Attacks

Since early this morning, the renowned hardware wallet Coldcard has suffered at least four consecutive attacks due to an RNG (random number generator) vulnerability—stolen BTC has rolled upward from 1,159 → 1,300 → 1,367 coins, with cumulative losses reaching approximately $88.6 million. A single Coldcard Mk3 wallet containing $38 million was unexpectedly emptied, and the manufacturer Coinkite now faces a class-action lawsuit. Simultaneously, a phishing scam impersonating Trezor resulted in another $282 million in BTC/LTC theft, one of the largest social engineering attacks in crypto history. The attacks are still ongoing. 【1,367 BTC Vanish: Coldcard’s Cascading Breach Shakes the Crypto World as the Hardware Wallet Myth Collapses】 Since early this morning, the renowned hardware wallet Coldcard has suffered at least four consecutive attacks due to an RNG (random number generator) vulnerability—stolen BTC has rolled upward from 1,159 → 1,300 → 1,367 coins, with cumulative losses reaching approximately $88.6 million. A single Coldcard Mk3 wallet containing $38 million was unexpectedly emptied, and the manufacturer Coinkite now faces a class-action lawsuit. Simultaneously, a phishing scam impersonating Trezor resulted in another $282 million in BTC/LTC theft, one of the largest social engineering attacks in crypto history. The attacks are still ongoing. Trust erosion is spreading. Coldcard, alongside Ledger and Trezor, is considered one of the “Big Three” hardware wallets. The RNG vulnerability implies a systemic flaw in private key generation, casting doubt on the entire hardware wallet industry’s security audit standards; authoritative institutions such as Galaxy Digital have already intervened to track the incident. Market sentiment is directly pressured. Coldcard’s losses coincided with the Fed’s rare 9-3 policy split maintaining interest rates; BTC plunged below $64,000, hitting a low of $63,267. Within 24 hours, $1.57 billion in total liquidations occurred across the network ($1.1 billion from long positions, accounting for 70%), with the largest single liquidation reaching $20.54 million; ETH tested the $1,870–$1,900 range. The concentrated sell-off of Coldcard’s 1,367 BTC is suspected to be one of the primary drivers of the price collapse. Regulatory acceleration is underway. The U.S. CLARITY Act is set for a full chamber vote in the first week of August; hardware wallet vulnerabilities may serve as the catalyst for strengthening “consumer protection” provisions within the bill. ① Coldcard users should immediately migrate assets to multisignature or multi-device分散 solutions and are advised not to continue using Mk3 devices; ② $62,000 is a critical support level for BTC; a break below could trigger cascading liquidations toward the psychological $60,000 level; a rebound to $66,000 may offer a short-term profit-taking opportunity; ③ Maintain leverage at or below 2x and avoid trading around the July 31 U.S. PCE data release window; ④ Focus on medium- to long-term dollar-cost averaging; monitor how CLARITY Act’s final provisions on self-custody protections may reshape the hardware wallet sector. Risk Disclaimer: The views, conclusions, and recommendations in this content are for informational purposes only and do not constitute investment advice. Market risks exist—invest with caution. Trust erosion is spreading. Coldcard, alongside Ledger and Trezor, is considered one of the “Big Three” hardware wallets. The RNG vulnerability implies a systemic flaw in private key generation, casting doubt on the entire hardware wallet industry’s security audit standards; authoritative institutions such as Galaxy Digital have already intervened to track the incident. Market sentiment is directly pressured. Coldcard’s losses coincided with the Fed’s rare 9-3 policy split maintaining interest rates; BTC plunged below $64,000, hitting a low of $63,267. Within 24 hours, $1.57 billion in total liquidations occurred across the network ($1.1 billion from long positions, accounting for 70%), with the largest single liquidation reaching $20.54 million; ETH tested the $1,870–$1,900 range. The concentrated sell-off of Coldcard’s 1,367 BTC is suspected to be one of the primary drivers of the price collapse. Regulatory acceleration is underway. The U.S. CLARITY Act is set for a full chamber vote in the first week of August; hardware wallet vulnerabilities may serve as the catalyst for strengthening “consumer protection” provisions within the bill. ① Coldcard users should immediately migrate assets to multisignature or multi-device分散 solutions and are advised not to continue using Mk3 devices; ② $62,000 is a critical support level for BTC; a break below could trigger cascading liquidations toward the psychological $60,000 level; a rebound to $66,000 may offer a short-term profit-taking opportunity; ③ Maintain leverage at or below 2x and avoid trading around the July 31 U.S. PCE data release window; ④ Focus on medium- to long-term dollar-cost averaging; monitor how CLARITY Act’s final provisions on self-custody protections may reshape the hardware wallet sector. Risk Disclaimer: The views, conclusions, and recommendations in this content are for informational purposes only and do not constitute investment advice. Market risks exist—invest with caution.