The Bitcoin hardware wallet Coldcard has a vulnerability in its random number generation, resulting in approximately $110 million worth of Bitcoin being stolen.

date
03/08/2026
The well-known Bitcoin hardware wallet Coldcard has been reported to have a vulnerability in its random number generation, leading to a systematic derivation of mnemonic phrases generated by many offline "cold wallets." Analysis firms indicate that as of August 3, attackers have stolen over 1,755 Bitcoins from about 5,000 affected wallets, which amounts to approximately $110 million at the time's market value. Device manufacturer Coinkite has confirmed the vulnerability and released a firmware update, urging users to update promptly. Coldcard has long been considered one of the safest ways to store cryptocurrencies. Industry data shows that the total amount of cryptocurrency stolen globally in the first half of this year reached $972 million, with a total of 207 hacking incidents, setting a new half-year record.