{"id":7026510,"date":"2026-08-04T08:45:05","date_gmt":"2026-08-04T08:45:05","guid":{"rendered":"https:\/\/peraltafinancing.com\/uncategorized\/coldcard-crypto-hack-86m-in-bitcoin-drained\/"},"modified":"2026-08-04T08:45:05","modified_gmt":"2026-08-04T08:45:05","slug":"coldcard-crypto-hack-86m-in-bitcoin-drained","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=7026510","title":{"rendered":"Coldcard Crypto Hack: $86M in Bitcoin Drained"},"content":{"rendered":"


\n<\/p>\n

\n

A crypto hack targeting a firmware flaw in the Coldcard Bitcoin hardware wallet has drained at least 1,367 BTC, worth approximately $86M at current prices, from more than 4,500 cold storage addresses across three waves of attacks. The exploit never required physical access to a single device; it rebuilt private keys from scratch using mathematics.<\/p>\n

\n

Galaxy Research: Three Suspected Attacks on Coldcard-Generated Addresses Drain 1,367 BTC<\/p>\n

Galaxy Research said its Bitcoin on-chain analysis identified three suspected attack waves targeting addresses generated by Coldcard, involving 4,585 addresses and a total of 1,367.05 BTC\u2026 pic.twitter.com\/JdSz4W1TIk<\/a><\/p>\n

\u2014 Wu Blockchain (@WuBlockchain) August 1, 2026<\/a><\/p>\n<\/blockquote>\n

The central problem: Bitcoin self-custody promises that a key stored offline is unreachable. This attack proved that an unreachable key can still be unguessable, or not.<\/p>\n

This story has unfolded as BTC USD sits at around $62,250, down -1.4% on this Monday morning as rumors swirl of Saylor lining up to dump more Bitcoin and the CLARITY Act deadline nearing, with no breakthrough looking likely.<\/p>\n

\n

$BTC<\/a> is back into the $62,000-$62,500 level.<\/p>\n

Hold this level, and Bitcoin could rally towards $65,000.<\/p>\n

Lose this level, and BTC could drop to $60,000. pic.twitter.com\/O877SmIdMU<\/a><\/p>\n

\u2014 Ted (@TedPillows) August 3, 2026<\/a><\/p>\n<\/blockquote>\n

How a Broken Random-Number Generator Broke Cold Storage<\/h2>\n

Coinkite, the Canadian maker of the Coldcard, confirmed that a March 2021 firmware error caused a vulnerability in its pseudo-random number generator (PRNG) during seed phrase creation.<\/p>\n

Instead of using a hardware random-number generator, the firmware relied on the chip\u2019s serial number and clock registers, reducing the potential keys from cryptographically vast to countable.<\/p>\n

This allowed attackers to generate candidate seeds, derive corresponding Bitcoin addresses, and check them against the public blockchain without involving the victim\u2019s device.<\/p>\n

Galaxy Research detailed the first wave of attacks, where 1,082.65 BTC was stolen from 1,196 addresses in just 41 minutes on July 30.<\/p>\n

A subsequent wave added around 208 BTC from 1,912 addresses using more sophisticated techniques, like batching multiple victims in a single transaction. Galaxy believes the attacks are orchestrated by a single operator but has not linked all three waves.<\/p>\n

\n

$1.6 million dollars in Bitcoin was drained from my account on July 29th in the Cold Card wallet hack.<\/p>\n

My Bitcoin was in cold storage. My keys were on a ColdCard device kept in a safety deposit box that had never been connected to the internet.<\/p>\n

This part’s nerdy, but here’s\u2026 pic.twitter.com\/Lf9kJv9Jo4<\/a><\/p>\n

\u2014 Jonathan Goodman \ud83c\udde8\ud83c\udde6 (@itscoachgoodman) August 1, 2026<\/a><\/p>\n<\/blockquote>\n

Trade BTC Markets on Kalshi and Claim Your FREE $25<\/span><\/a>\n<\/p>\n

Crypto Hack: Which Wallets Are Affected and What Owners Must Do Now<\/h2>\n

Coinkite initially warned users of Mk3 devices running firmware version 4.0.1 or later, later expanding this to include certain Mk4, Mk5, and Coldcard Q firmware versions. Emergency firmware updates were released, and CEO Rodolfo Novak apologized, taking \u201cfull accountability\u201d for the bug.<\/p>\n

However, updating the firmware does not fix the issue if a seed was generated on a vulnerable build; users must create a new seed and migrate funds to a new wallet. This incident highlights that the quality of entropy implementation is more crucial than brand reputation for hardware wallet security.<\/p>\n

Jan3 CEO Samson Mow urged all Coldcard users to migrate their funds due to ongoing attacks. Block\u2019s Clay Garrett noted that a paid account was used to identify source addresses during these attacks, and this information has been passed to authorities.<\/p>\n

The Bigger Picture: Self-Custody Moves Risk, It Doesn\u2019t Erase It<\/h2>\n

This crypto hack incident reflects a broader trend observed in 2026, where infrastructure and key compromise incidents, though fewer in number, lead to most dollar losses in the industry.<\/p>\n

Speculation on X suggests AI tools may have played a role in discovering or exploiting the flaw, but this has not been confirmed by Coinkite or Block.<\/p>\n

The Coldcard episode underscores a crucial principle: a hardware wallet\u2019s strength relies on the randomness used for key generation. As noted by Galaxy Research, the decreasing cost of analyzing weak key spaces means the industry must improve its standards for entropy verification.<\/p>\n

For those holding Bitcoin in self-custody, it\u2019s essential to check your Coldcard firmware against Coinkite\u2019s advisory, generate a new seed on updated firmware, and migrate funds to ensure safety.<\/p>\n

EXPLORE:\u00a0Best Crypto Presales With Asymmetric Upside in the Current Market<\/a><\/strong><\/p>\n

\n<\/section>\n

\t\t\t\t\t<\/p>\n

\n
\n\t\t\t\t\t\"\"\/<\/p>\n
\n

Why you can trust 99Bitcoins<\/h2>\n<\/p>\n
\n
\n\t\t\t\t\t\t\t\t\t\t10+ Years<\/strong><\/p>\n

Established in 2013, 99Bitcoin\u2019s team members have been crypto experts since Bitcoin\u2019s Early days.<\/p>\n<\/p><\/div>\n

\n
\n

\t\t\t\t\t\t\t\t\t\t\t\t90hr+<\/strong><\/p>\n

Weekly Research<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\t100k+<\/strong><\/p>\n

Monthly readers<\/p>\n<\/p><\/div>\n

\n

\t\t\t\t\t\t\t\t\t\t\t\t50+<\/strong><\/p>\n

Expert contributors<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\t2000+<\/strong><\/p>\n

Crypto Projects Reviewed<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

\t\t\t\t\t\"\"\"\"\/<\/p><\/div>\n<\/p><\/div>\n

\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n

\n\t\t\t\"Google\"Google<\/p>\n

Follow 99Bitcoins on your Google News Feed<\/p>\n

Get the latest updates, trends, and insights delivered straight to your fingertips. Subscribe now!<\/p>\n

\t\t\t
\n\t\t\tSubscribe now \"\"\"\"\/
\n\t\t<\/a>\n\t<\/div>\n

\t\t\t\t\t<\/p>\n

\n
\n
\n\t\t\t\"Alex<\/a>\t\t\t<\/div>\n
\n

Alex Ioannou<\/p>\n

\n\t\t\t\tOn-Chain Journalist\t\t\t\t<\/p>\n<\/p><\/div>\n<\/p><\/div>\n

\n

\n\t\t\tAlex is a seasoned cryptocurrency trader and market analyst with over seven years of active experience in the digital asset space. Since entering the markets in 2017, Alex has specialized in identifying emerging “meta” trends and high-volatility narratives. Notably, Alex…\t\t\t
\n\t\t\t\tRead More\t\t\t<\/a>\n\t\t\t<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n