Hardware wallet flaw exposes $30M in crypto

TLDR

A firmware bug in Coldcard Bitcoin hardware wallets let an attacker reconstruct private keys offline and steal tens of millions of dollars, including about $30 million in the first 10 minutes.

1. A predictable seed generation flaw in certain Coldcard devices enabled a sweep of roughly 594 BTC, with about $30 million stolen in minutes and total losses now estimated near $70 million.
2. Seeds created on specific Coldcard firmware versions are at risk, while wallets with strong passphrases, extra entropy, multisig setups, or unaffected brands have much lower exposure.
3. The incident highlights that self-custody risk is increasingly about firmware and operational security, not blockchains, and may push more users toward more layered or professional custody models.

Deep Dive

1. How The Flaw Led To $30M Plus Losses

Blockchain analytics firm Chainalysis reports that the attacker stole roughly $30 million in bitcoin during the first 10 minutes, prioritizing high-value Coldcard wallets, before draining about 594 BTC across roughly 500 addresses in 25 minutes. This operation is detailed in a Coldcard attacker analysis.

Subsequent investigations by Galaxy Research and others link up to 1,083 BTC, worth around $70 million, from 1,196 wallets to the same exploit, showing the initial $30 million figure was only the early portion of a larger sweep, as summarized in a broader Coldcard exploit overview.

Technically, a firmware migration in 2021 caused some Coldcard devices to fall back to a software pseudo-random generator seeded by predictable chip and clock data, reducing seed entropy from the intended 128 bits to about 40 or 72 bits. That made seed phrases computationally enumerable, letting the attacker recreate private keys entirely offline, a flaw described in detail in a Decrypt technical report.

Confidence: high because multiple independent investigations agree on the timing, amounts, and root cause.

2. Who Is At Risk And Who Is Safer

Coinkites advisory and incident reporting indicate the risk centers on seeds generated on Coldcard Mk3 firmware from version 4.0.1 onward, plus certain Mk4, Mk5, and Q versions before specific fixed releases, with affected seeds having far weaker entropy than users were promised, as outlined in this firmware risk notice.

Critically, simply updating firmware does not repair seeds that were already created on vulnerable versions. Users must treat those seeds as compromised and move funds to wallets generated with patched firmware or different devices, a point emphasized in the exploit overview.

Investigators note that users who added strong BIP-39 passphrases, used extensive dice-roll entropy, or held coins in robust multisig setups are largely protected, and competing hardware wallets like Ledger and Trezor have publicly stated they are unaffected because they rely on stronger randomness sources.

3. Self-Custody Risk And Market Impact

The exploit did not attack Bitcoin itself or online infrastructure; it targeted key generation, turning supposed cold storage into a single point of failure. Analysts argue this is an operational failure within self-custody, not a protocol failure, and that similar bugs could exist in other complex wallet stacks.

Commentary from industry figures collected by CoinDesk suggests this episode has shaken confidence in set-and-forget hardware self-custody and may accelerate adoption of regulated custodians and spot Bitcoin ETFs for some users, as discussed in a self-custody impact piece.

For users who remain self-custodial, the lesson is to treat firmware review, entropy sources, and independent audits as first-class priorities, and to favor setups that reduce single-device, single-seed risk, such as well-designed multisig and layered defenses.

Conclusion

The Coldcard flaw shows how a subtle entropy bug can turn a trusted hardware wallet into a systemic vulnerability, allowing tens of millions of dollars to be stolen without touching the devices themselves. For crypto holders, the practical takeaway is that wallet choice, firmware hygiene, and seed-hardening practices are as important as which coin they own, and that reducing single points of failure in key generation is now a core part of serious self-custody.