Coldcard Hardware Wallet Flaw Drains $89M in Bitcoin
- Security
- Key Compromise

Attackers exploited a legacy firmware bug in Coldcard devices to drain nearly $89 million from over 1,200 addresses in under an hour. Galaxy Digital traced the sweep to 1,196 addresses totaling $70.2 million with additional losses pushing the total higher. The incident exposed RNG weaknesses across five Coldcard models and triggered widespread CT panic over hardware wallet security.
Incident Details
- Type
- KEY COMPROMISE
- Funds Lost
- $89M
- Status
- Ongoing
CT debates hardware wallet trust and cold storage best practices