Signal

Critical Coldcard hardware wallet flaw leads to $70M bitcoin theft and urgent user warnings

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-07-31 02:38 UTCUpdated 2026-07-31 15:22 UTC
rsstelegram
crypto_assetshardware_walletssecurityhacks
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.
3 top sources shown
Decrypt
decrypt.co · decrypt.co · 2026-07-31 09:03 UTC
Overview

A severe security vulnerability in Coldcard hardware wallets, produced by Coinkite, has resulted in the theft of over $70 million worth of bitcoin.

Entities
CoinkiteColdcardPeter ToddBTC
Score total
2.22
Momentum 24h
10
Posts
10
Origins
6
Source types
2
Duplicate ratio
20%
Why now
  • Funds are actively being drained from vulnerable Coldcard wallets, requiring immediate user action.
  • Coinkite has issued urgent warnings to users of multiple Coldcard models to migrate funds.
  • The incident underscores emerging threats from AI-assisted attacks on crypto infrastructure.
Why it matters
  • Highlights critical risks in hardware wallet security and seed generation entropy.
  • Demonstrates how AI can be used to discover vulnerabilities in open-source crypto firmware.
  • Raises awareness about the safety of single-signature wallets in storing significant bitcoin funds.
LLM analysis
Recurring claims
  • Coldcard hardware wallets have a seed generation bug that allows attackers to brute-force private keys due to insufficient entropy.
  • Hackers have stolen over $70 million worth of bitcoin by exploiting this Coldcard vulnerability.
  • Coinkite suspects attackers used AI to analyze open-source firmware and discover the vulnerability.
  • Bitcoin developer Peter Todd warns that no bitcoin is safe on single-signature wallets following the Coldcard breach.
How sources frame it
  • Bitcoin Magazine: neutral
  • Decrypt: neutral
  • U.Today: neutral
This major Coldcard vulnerability and resulting bitcoin theft highlight the critical importance of secure entropy sources in hardware wallets and the emerging role of AI in uncovering crypto security flaws.
All evidence
All evidence
Decrypt
decrypt.co · decrypt.co · 2026-07-31 09:03 UTC
Bitcoin Magazine
bitcoinmagazine.com · bitcoinmagazine.com · 2026-07-31 15:22 UTC
COLDCARD SECURITY RISK: IMMEDIATE ACTION REQUIRED
Bitcoin Magazine · bitcoinmagazine.com · 2026-07-31 15:22 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 3Duplicates: -
Showing 5 / 0
Top publishers (this list)
  • U.Today (2)
  • decrypt.co (1)
  • bitcoinmagazine.com (1)
  • Bitcoin Magazine (1)
Top origin domains (this list)
  • bitcoinmagazine.com (2)
  • u.today (2)
  • decrypt.co (1)