Coldcard wallet flaw drains $71M BTC

TLDR

A firmware bug in Coldcard Bitcoin hardware wallets let attackers recreate seeds and steal at least around $71 million worth of BTC from self custody users.

1. Investigations now point to more than 1,100 BTC stolen, with later waves pushing estimated losses toward $89 million across thousands of addresses.
2. The flaw drastically weakened seed randomness, letting attackers brute force Coldcard generated keys offline without touching devices and undermining faith in hardware wallets.
3. Affected users need new, secure seeds and careful migration, while the wider market watches for more sweeps, vendor audits, and potential regulatory attention on wallet security.

Deep Dive

1. Scale Of The Theft

Initial reports described about 594 BTC, roughly $38 million, drained from around 500 Coldcard wallets in under 25 to 41 minutes. Later analysis by Galaxy Research expanded that to about 1,082.65 BTC, near $70.2 million, taken from 1,196 addresses in one coordinated sweep.

A deeper review found at least 1,128.47 BTC, around $71.1 million, stolen via the same flaw, with a subsequent third wave bringing the total toward approximately 1,367 BTC, or about $88.6 million, across more than 4,500 addresses, according to Galaxys on chain mapping and follow up reporting on at least 1,128 BTC and losses approaching $89 million.

Despite the size of the theft, Bitcoins price reaction has been relatively muted, with the main impact landing on user trust in self custody rather than on market structure.

2. How The Flaw Worked

The vulnerability traces to a firmware change from March 2021 that accidentally disabled Coldcards hardware random number generator and fell back to a software source using predictable data such as device serial numbers and internal clocks. This reduced seed entropy from a target of 128 bits to about 40 bits on some devices and around 72 bits on newer models, making brute force reconstruction of seeds feasible as described in the firmware bug reduced entropy.

Attackers appear to have precomputed huge sets of possible wallet keys, scanned the Bitcoin blockchain for matching addresses, then swept funds with automated transactions that used identical fees and no change outputs. Seeds generated with extra personal randomness, such as extensive dice rolls, or protected by strong BIP 39 passphrases were much harder or impossible to reproduce, and those wallets mostly avoided loss.

Firmware updates fix future seeds, but they cannot repair seeds already created under the flawed randomness, so any vulnerable wallet needs a fully new seed and migration.

3. Impact On Self Custody And What To Watch

The incident has sharply increased fear around self custody, with sentiment trackers reporting unusually high bearish commentary as users react to a hardware device failure rather than an exchange collapse, outlined in record self custody fear.

Other vendors including Block, Trezor, and Ledger have stated that their devices are unaffected, but there is growing pressure for all hardware wallet makers to publish clearer entropy testing and audit results. Binance founder CZ has publicly warned that nothing is 100% safe and suggested diversifying holdings across multiple wallets in light of the Coldcard exploit and CZs warning.

For individual users, the higher level lesson is that self custody requires defense in depth: independent randomness when generating seeds, optional passphrases, possible multisig with keys from different vendors, and not concentrating large balances in a single device.

Conclusion

A single firmware mistake in a respected hardware wallet turned into one of the largest Bitcoin self custody failures, with attackers reconstructing keys and draining tens of millions of dollars in BTC. The direct loss is material but small relative to Bitcoins total supply; the real shock is to trust in offline equals safe.

Going forward, the key questions are whether more vulnerable wallets are still exposed, how quickly manufacturers raise security standards, and whether regulators treat hardware wallets more like financial products. For crypto users, robust self custody now means layering randomness, diversification, and verification, not relying on any one device or vendor.

Confidence: high because multiple independent technical reports, on chain analyses, and manufacturer statements converge on the same flaw, attack pattern, and loss range.