News

Public · Published

Coldcard attack: 25 minutes, 500 wallets, $38M in BTC gone

A bug in Coldcard hardware wallets let thieves steal thirty‑eight million dollars worth of Bitcoin from about 500 wallets in roughly twenty‑five minutes, and the maker says its best AI models could not detect the flaw.

Published:

Updated:

What happened

A bug in Coldcard hardware wallets let thieves steal thirty‑eight million dollars worth of Bitcoin from about 500 wallets in roughly twenty‑five minutes, and the maker says its best AI models could not detect the flaw.

Confirmed

Global impact / market context

Investors trust hardware wallets to keep Bitcoin safe; a breach of this size questions that trust and may push users to look for more reliable storage options, affecting confidence in similar devices.

Analyst inference

The failure highlights a gap in current security tools for crypto storage, which could influence how wallet manufacturers design future products and how investors assess risk in the hardware‑wallet market.

Analyst inference

What to watch

  1. Coldcard’s announcements of firmware patches or security updates that aim to fix the bug and restore user confidence. Proposed
  2. Any statements from other hardware‑wallet makers about reviewing their own security models after the Coldcard incident. Proposed
  3. Potential regulatory comments on hardware‑wallet security standards prompted by the Coldcard breach. Proposed

Affected assets

  • BTC — Bitcoin

Evidence