This website uses cookies

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

Consent Selection

Necessary

Preferences

Statistics

Marketing

Show details

Details

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
- Pexels
  1
  Learn more about this provider
  _cfuvidThis cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
  Maximum Storage Duration: SessionType: HTTP Cookie
- ambcrypto.com
  benzinga.com
  bitcoinmagazine.com
  coingape.com
  decrypt.co
  image.coinpedia.org
  pexels.com
  7
  __cf_bm [x7]This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
  Maximum Storage Duration: 1 dayType: HTTP Cookie
- newslayer.com
  1
  CookieConsentStores the user's cookie consent state for the current domain
  Maximum Storage Duration: 1 yearType: HTTP Cookie
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
- We do not use cookies of this type.
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
- We do not use cookies of this type.
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
- We do not use cookies of this type.
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
- newslayer.com
  3
  __emg_sidPending
  Maximum Storage Duration: 1 dayType: HTTP Cookie
  __emg_vidPending
  Maximum Storage Duration: 1 yearType: HTTP Cookie
  nl-read-countPending
  Maximum Storage Duration: PersistentType: HTML Local Storage

Cookie declaration last updated on 8/12/26 by Cookiebot

[#IABV2_TITLE#]

[#IABV2_BODY_INTRO#]

[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]

[#IABV2_BODY_PREFERENCE_INTRO#]

[#IABV2_BODY_PURPOSES_INTRO#]

[#IABV2_BODY_PURPOSES#]

[#IABV2_BODY_FEATURES_INTRO#]

[#IABV2_BODY_FEATURES#]

[#IABV2_BODY_PARTNERS_INTRO#]

[#IABV2_BODY_PARTNERS#]

About

Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.

Do not sell or share my personal information

Install NewsLayer

Get the app experience — one tap from your home screen, instant loads and breaking-news alerts.

NewsLayer PulseLIVEBTC$69,245+7.69%ETH$2,250+17.97%SOL$84.65+10.28%XRP$1.1+10.14%DOGE$0.0753+7.73%ADA$0.1855+6.63%Total Cap$2.48T+7.96%24H Vol$441.4BLayer Index75 Greed

BreakingSix-Bug Exploit Halts Maya Protocol After $1.4 Million in Bitcoin Stolenil y a 9 heures

Markets

Crypto

breaking

Coldcard Wallet Breach Exposes $112M Bitcoin Theft Risk

A hidden flaw in one of the most trusted names in Bitcoin self-custody has triggered the largest hardware wallet breach ever recorded. The Coldcard wallet breach traces back to a firmware bug that sat undetected since March 2021,…

The Cryptonomist

Publisher

Aug 17, 2026 at 8:43 AM UTC · Updated il y a 3 jours · 6 min de lecture

Entities

bitcoin

Last Updated

il y a 3 jours

Traduction…

A hidden flaw in one of the most trusted names in Bitcoin self-custody has triggered the largest hardware wallet breach ever recorded. The Coldcard wallet breach traces back to a firmware bug that sat undetected since March 2021, quietly weakening the device’s ability to generate truly random seed phrases until attackers found it years later and drained more than 1,778 Bitcoin from thousands of victims.

Key takeaways

A firmware bug active since March 2021 let attackers steal more than 1,778 Bitcoin, worth roughly $112.7 million, from over 8,600 Coldcard wallet addresses.
The flaw originated in firmware version 4.0.1, which mistakenly rerouted seed phrase generation to a predictable software-based random number generator instead of hardware randomness.
Galaxy Research believes attackers used AI models without cybersecurity restrictions to find and exploit the bug, while US AI safety policies limited defenders from using comparable tools.
Coinkite issued a security advisory on July 30 and shipped patched firmware by July 31, but no multisignature Coldcard wallets were affected.
Users on vulnerable firmware must generate entirely new seed phrases and migrate funds, since old keys remain permanently compromised.

Market Context

Bitcoin

BTC

$69,263

+7.72% (24H)