Coldcard

Coinkite's security update requires user-generated randomness for new seeds and patches critical vulnerability that let attackers reconstruct weak keys from 8,600+ addresses.

A breach of Coldcard hardware wallets hit 7,300 Bitcoin addresses across three attack waves, with other major protocols and bridges also targeted in the month's second-worst security toll of 2026.

Hardware wallet breach, DeFi hacks and bridge exploits made July the second-worst month for stolen digital assets in 2026

The hardware wallet breach alone accounted for at least $100 million in stolen Bitcoin, impacting 7,300 wallets across confirmed attack waves.

On-chain losses hit $247.4 million in July, led by a Coldcard hardware wallet breach topping $100 million and attacks on multiple DeFi protocols and bridges.

A firmware bug in Coldcard hardware wallets let attackers drain funds from over 5,200 addresses starting July 30, with total losses now exceeding initial estimates.

The hardware wallet breach accounted for over $100 million in losses, more than tripling June's total and ranking as the year's second-highest monthly theft figure.

Hackers exploited a firmware defect in Coldcard hardware wallets, draining an estimated $130 million in Bitcoin; manufacturer Coinkite cannot verify the total due to its privacy-first design.

A critical flaw in Coldcard hardware wallets triggered a massive Bitcoin outflow, driving small holders to centralized exchanges and alternative custody.

A firmware flaw in Coldcard hardware wallets drained 1,128.6633 BTC from over 1,100 wallets July 30, hitting markets already absorbing $265 million in ETF outflows and two August forks.

The hardware wallet maker urged users to migrate funds from devices running specific firmware versions, as researchers separately tracked a 594.48 BTC theft worth $38 million.