Over $115 million in Bitcoin stolen. 1,778 BTC. 8,680 wallets affected. And it all started with Coldcard devices. 🚨
According to Galaxy Research, this figure has been growing since July 30 until today, meaning it was not a one-time attack, but a breach that was continuously exploited over weeks.
And here is where the community needs to pause: Coldcard was (is) considered one of the most reliable cold wallets on the market—the very type of device people buy thinking, "Here I am truly secure." That’s what makes this case so important to understand: it’s not a centralized exchange failing, but the physical custody chain itself that was compromised.
The real lesson is not "don’t use hardware wallets," but to understand that no device is 100% infallible, and security in crypto remains a process, not a product you buy once and forget. Verifying firmware, checking purchase sources, and staying informed about vulnerabilities remains constant work.
If you have funds in cold storage, this is a good time to review: Where did you buy your device? Did you verify the firmware? And do you truly know how to react if something like this happens?
Do you trust hardware wallets more, regulated exchanges, or prefer a hybrid model? 👇
