Coldcard Exploit Drains $116M Bitcoin From 5,200 Wallets in Days
An attacker has systematically drained 1,816 Bitcoin worth approximately USD 116 million from over 5,200 Coldcard hardware wallet addresses since July 30, exploiting a five-year-old firmware vulnerability that crippled the device’s random number generation. The breach, which accelerated through multiple coordinated waves of theft, exposes a critical vulnerability in the self-custody narrative that has anchored…