hardware wallet

Coinkite's security update requires user-generated randomness for new seeds and patches critical vulnerability that let attackers reconstruct weak keys from 8,600+ addresses.

A breach of Coldcard hardware wallets hit 7,300 Bitcoin addresses across three attack waves, with other major protocols and bridges also targeted in the month's second-worst security toll of 2026.

The hardware wallet breach alone accounted for at least $100 million in stolen Bitcoin, impacting 7,300 wallets across confirmed attack waves.

A firmware bug in Coldcard hardware wallets let attackers drain funds from over 5,200 addresses starting July 30, with total losses now exceeding initial estimates.

Hackers exploited a firmware defect in Coldcard hardware wallets, draining an estimated $130 million in Bitcoin; manufacturer Coinkite cannot verify the total due to its privacy-first design.

Coinkite will publish a technical post-mortem on a Coldcard firmware vulnerability as outside researchers estimate customer losses at $130 million.

The hardware wallet maker urged users to migrate funds from devices running specific firmware versions, as researchers separately tracked a 594.48 BTC theft worth $38 million.