How to Protect Yourself From This Massive Ongoing Cryptocurrency Hack

It seems no sooner does someone come up with a method to keep your digital data safe than hackers find a way to subvert it. Today's case in point: Bad actors have stolen more than $130 million in cryptocurrency from users of offline hardware wallets, devices specifically meant to be a safe option for securing bitcoin.

Hackers are attacking cold crypto wallets

As TechCrunch reports, multiple groups of hackers have gained access to Coldcard crypto wallets and are continuing to drain funds in an ongoing theft. The wallets, made by Coinkite, are considered "cold," meaning they are not connected to the internet or any other device, and users' keys or seed phrases exist entirely offline. By contrast, "hot" wallets are connected to the internet and include apps and browser extensions.

Typically, hot wallets are considered a greater security risk for hacks, theft, malware, and ransomware, but this latest attack exploited a flaw in Coldcard's seed phrase generation process, compromising users' cold wallets. The vulnerability made seeds predictable, so threat actors were able to brute-force victims' passwords—essentially, guess them via trial and error—and gain access to their wallets.

Hackers carried out more than 200 crypto attacks between January and July of this year, leading to losses of $972 million. That's an increase in the number of events, but a significantly lower amount stolen, compared to the first six months of 2025.