🚨 BITCOIN WALLET FLAW TRIGGERS $40M SWEEP. A major security flaw in certain Coldcard hardware wallets led to a rapid theft of about 594 BTC — worth roughly $38–40 million — drained from around 500 wallets in a tight 25‑minute window. Investigators say the issue stems from a firmware bug dating back years that caused some devices to generate predictable seed phrases. That made private keys guessable, letting attackers steal funds without touching the physical wallets. The sweep happened early on July 30, 2026. On‑chain data shows hundreds of small wallet balances pulled into a single collector address, then moved again into a second address that has not spent the funds. Coinkite, the maker of Coldcard, issued an urgent advisory warning users to check whether their devices were running affected firmware versions. Security researchers say the flaw highlights how critical true randomness is in wallet design and why multisig setups can reduce single‑point failures. This incident is one of the largest hardware‑wallet‑related Bitcoin thefts ever recorded. It raises fresh questions about long‑term device audits, firmware transparency, and how users can verify the integrity of their self‑custody tools.