your 'safest' Bitcoin wallet had a broken lock since 2021 — and hackers just found it

Coldcard built its reputation on being the hardware wallet security people trust with real money — air-gapped, open-source, Bitcoin-only. On July 30, 2026, attackers started proving that reputation had a five-year-old hole in it. A firmware bug shipped in March 2021 had been quietly weakening the random numbers Coldcard used to generate wallet seeds. By the time Coinkite, the company behind Coldcard, patched it, roughly 1,816 BTC, about $116 million, had been drained from more than 5,200 addresses.

How a hardware chip got skipped for five years

The bug itself is almost embarrassingly simple to explain, per The Hacker News' technical writeup. Coldcard devices are supposed to pull randomness for a new wallet seed from a dedicated hardware random-number generator built into the chip — the part of the security story that's supposed to make a hardware wallet meaningfully safer than software. A production configuration error in the March 2021 firmware build set a flag called MICROPY_HW_ENABLE_RNG to zero, which silently rerouted seed generation to MicroPython's software fallback generator instead. That dropped the effective entropy from the 128 bits a secure seed needs down to somewhere between 40 and 72 bits depending on the model, weak enough to brute-force without ever touching the physical device.

Coinkite's CEO, who goes by NVK, didn't soften the warning when the advisory went out: 'If you generated a seed using a Coldcard wallet, move your funds now, using our updated best practices, before reading further.' That's not boilerplate. Installing the new firmware only protects seeds generated after you update it. Anything created on a vulnerable Coldcard between March 2021 and the patch needs to be treated as burned, full stop, even if it's sitting untouched today.

Who actually got hit, and how they're being caught

Galaxy Research and TRM Labs have been running the on-chain math since the first wave, and the pattern is uglier than a single opportunistic hacker cashing in. Transaction construction differs across the four waves enough that researchers think multiple attackers may be working the same vulnerability independently. TRM traced part of the stolen funds through a 64.9 BTC deposit into Wasabi Wallet and roughly 200 ETH routed through Tornado Cash on August 4, standard mixing playbook, not a sign anyone's slowing down. Canadian holders took the largest share of the losses, around a quarter of the total, ahead of victims in the US and Thailand.

The part that should worry every hardware-wallet owner

This is where I'll push back on the instinct to treat this as a Coinkite-specific story. Coldcard passed years of scrutiny from a security-conscious community that reads firmware changelogs for fun, and the flaw still sat live for five years. It fits a pattern running through 2026's worst security stories — a ransomware gang running its command infrastructure on the Polygon blockchain, a single hijacked npm maintainer account turning into a billion-download supply-chain attack, 15 million dental patient records exposed, where the failure isn't a dramatic zero-day, it's one overlooked default that nobody rechecked for half a decade. Self-custody was supposed to remove counterparty risk. It just relocated the risk to a chip most owners never once thought to question.

The fallout is already reaching lawyers. Thomas Braziel of 117 Partners is examining product liability and class-action claims against Coinkite on behalf of affected holders, and legal experts are split on how strong that case actually is — a defect claim is plausible, but device makers have historically had wide latitude to disclaim this kind of loss in their terms of service. Coinkite's decision to stop automatically deleting customer records, a reversal of a policy the brand built its entire privacy pitch around, is itself the clearest signal that the company expects to end up in court.

Self-custody relocates risk rather than eliminating it.

TRM Labs

Watch two things from here. First, whether Coinkite ever publishes a real number instead of the range analysts have pieced together on-chain, reporting says the company still won't estimate its own losses. Second, whether the class-action threat turns into an actual filing, because that outcome will set the precedent for how liable a hardware-wallet maker can be held when the failure is in the chip, not the user. Until then, if you've ever owned a Coldcard, check your firmware version before you do anything else today.