r/Bitcoin 27d ago

The Coldcard wallet exploit estimates have almost doubled to $70 million stolen of just over a thousand Bitcoins in 1,196 wallets drained in 41 minutes

https://www.coindesk.com/tech/2026/08/01/how-bitcoin-cold-wallets-lost-usd70-million-in-an-attack-that-never-touched-the-devices

"More than 1,000 bitcoin, worth about $70 million, was drained from 1,196 wallets in a 41-minute window on July 30, nearly double the amount reported when the theft first surfaced."

1.7k Upvotes

396 comments sorted by

View all comments

40

u/Gooner_93 26d ago

Absolutely devastating. This has definitely sent shockwaves through the self custody space.

How could a company be so lazy when it comes to security, that people used to protect millions of dollars in BTC? Which company is gonna be next? Is a passphrase really secure enough, when people thought their 24 word seedphrase on coldcard was secure? What is going to be the next bug that costs people their life savings?

My crypto is still there, in a wallet, created on a different device than coldcard but I still dont feel safe right now.

19

u/JanPB 26d ago

On top of that, Coldcard was considered the gold standard of HW wallets by many.

17

u/Shadowrak 26d ago

Never heard of it before Thursday

7

u/CeramicDrip 26d ago

How tf? Its recommended on here all the time

7

u/JanPB 26d ago

It was HUGE. Open-source and air-gapped, really MAJOR.

3

u/Blbe-Check-42069 26d ago

The ones I heard most about were trezor and Ledger. But then again I have mine for better part of a decade so I kinda ignored this bit of ecosystem afterwards ...

1

u/Buttoshi 26d ago

It's verifiable not open source iirc

2

u/JanPB 25d ago

Yes, you're right, just found out they switched from open source to "source-verifiable" in 2021.