coldcard

The Coldcard news hits hard. People lose big Bitcoin from their hardware wallets. Old software mistake let thieves take over 100 million. I never used that wallet but it still scares me. Even trusted tools can fail after years. I check my own coins extra careful now. Self custody good idea but always need extra eyes. On Binance I keep trading part ready and rest more protected. Friends please stay sharp. Better move coins safe than cry later.

#Coldcard $BTC

South Korea's Bitcoin community largely avoided losses in the recent Coldcard hardware wallet exploit, thanks to cultural security habits. An analyst notes that these practices, emphasizing randomness and redundancy, protected Korean holders more than technical luck. This incident underscores the critical need for robust security measures in crypto storage. As hardware wallets are a cornerstone of crypto security, any exploit can shake investor confidence. The broader market may see increased scrutiny on wallet security practices, potentially driving demand for more secure alternatives. Traders should watch for any shifts in hardware wallet adoption trends and regulatory responses to such vulnerabilities. #Bitcoin #Coldcard #Security #Crypto

🚨 Security Alert for Bitcoin Holders

A recently disclosed Coldcard exploit has raised fresh concerns about hardware wallet security. According to market analysts, incidents like this could increase interest in regulated Bitcoin custody and investment products as users look for stronger protection.

🔹 Always keep your wallet firmware updated.
🔹 Verify downloads from official sources only.
🔹 Never share your seed phrase with anyone.
🔹 Security is more important than convenience.

What do you think—will this push more investors toward regulated Bitcoin solutions?

#Bitcoin #BTC #CryptoSecurity #Coldcard #BinanceSquare #CryptoNews #Blockchain #DYOR🟢

New blockchain activity has emerged following the COLDCARD wallet exploit.
While most of the stolen Bitcoin remains untouched, investigators have identified suspicious movements involving part of the stolen funds.

#Bitcoin #BTC #CryptoNews #Blockchain #CyberSecurity #Crypto #OnChain #DigitalAssets #Coldcard

When the COLDCARD gets stolen, the HODLing begins.

As crypto enthusiasts know, the COLDCARD wallet flaw led to a heist of epic proportions - a whopping 1,159 BTC remains untouched, a testament to the HODLer's unwavering resolve . On-chain investigators, however, have detected a separate attacker mixing smaller amounts, highlighting the cat-and-mouse game between hackers and researchers #COLDCARD #Bitcoin #HodlVsHack

According to a report from Galaxy Research, the public exploit attack targeting a vulnerability related to Coldcard wallets has recorded at least 1,719 BTC (equivalent to approximately USD 111 million) stolen. The total losses from this incident are expected to exceed USD 130 million.

#Bitcoin #Coldcard #AnNinhMạng

$ETH

According to a report from Galaxy Research, an attack exploiting a vulnerability involving Coldcard wallets has been recorded, with at least 1,719 BTC (equivalent to approximately $111 million) stolen. Total losses from this incident are expected to exceed $130 million.

#Bitcoin #Coldcard #Cybersecurity

$ETH

🚨 $130 Million in Bitcoin Stolen! Coldcard Vulnerability Triggers a Chain Reaction

短线100%胜率策略聊天群

This time it’s not a market crash—your wallet security is the issue.
Reports say that Coldcard hardware wallets previously had a mnemonic randomness vulnerability, causing the security strength of some wallets to drop significantly.

At least around 7,300 wallets are currently affected, and confirmed losses have already exceeded 1,596 BTC, with the losses still growing. Even more notably, after the vulnerability was disclosed, the number of active addresses on the Bitcoin blockchain suddenly surged to nearly 980,000. But this spike in activity isn’t because the market suddenly heated up—it’s because many users began urgently moving their funds.
Some of the stolen proceeds were later routed to privacy transaction tools, further increasing the difficulty of tracking.

⚠️ Security experts remind:
If you previously used an affected device to create a wallet, simply updating the firmware may not be enough.
What really matters is recreating a secure wallet and transferring your assets in time.
This incident also serves as another reminder:
🔐 Hardware wallets do not equal absolute security
🧠 Private key security is always the most critical part of digital assets

Click the profile picture to follow + join the Jiujiu chat group for daily strategies 🚀
#比特币 #BTC #Coldcard

Coldcard hardware wallet reveals a serious security vulnerability. Galaxy Research’s latest report shows that approximately 1,719 of the $BTC tokens have been stolen, worth about $111 million. Galaxy has received reports from more than 250 victims.

What’s even more alarming is that on-chain tracking indicates the creation records of these stolen tokens can be traced back to affected Coldcard firmware versions first published on March 17, 2021. In other words, the vulnerability may have been lurking for more than four years. The scope of affected devices appears to be currently focused on Coldcard Mk3, Mk4, Mk5, and Q-series units running that firmware, with no evidence so far that it has impacted other hardware wallets or signing devices outside Coldcard.

Galaxy further notes that more suspicious funds are still under verification, and it is expected that total losses may exceed $130 million. For users who hold Coldcard devices, the top priority is to quickly check the firmware version and migrate assets to a brand-new seed (mnemonic) wallet, while also keeping an eye on the official follow-up disclosures detailing the affected firmware.

Cold wallets are not absolutely secure. Even small vulnerabilities in the firmware supply chain or random number generation process may only surface years later through on-chain anomalies.

#硬件钱包 #Coldcard #BTC

A Major Vulnerability Has Appeared in the Coldcard Hardware Wallet! According to the latest data from Galaxy Research, about 1,719 $BTC (worth approximately $111 million) have been stolen due to this vulnerability. Galaxy has received reports from more than 250 victims. There are still more suspicious funds on-chain awaiting verification, and the total estimated losses may exceed $130 million.

Key takeaways:

1. Scope of impact: At present, there is no evidence that this vulnerability affects any other signing devices or wallets besides Coldcard Mk3, Mk4, Mk5, or Q. The impact is concentrated on the above devices running firmware versions released after March 17, 2021.

2. Key timeline: For firmware released before March 17, 2021, no records of the creation of stolen tokens have appeared on-chain. Users who used earlier firmware versions have not yet been found to be affected.

3. Fund tracking: Galaxy Research is continuously tracking the flow of stolen funds and advises affected users to promptly check the status of their assets.

Hardware wallets have long been regarded as one of the safest storage methods for crypto assets, but this Coldcard vulnerability incident is yet another warning: even offline storage devices cannot completely eliminate code-level security risks.

For users holding positions, it is recommended to immediately confirm the firmware version of your Coldcard device. If it is running firmware released after March 17, 2021, you should transfer your assets to brand-new cold wallet addresses that have never been exposed online as soon as possible. Also closely monitor official follow-up patch updates and vulnerability notices.

Safety matters—every step in using a cold wallet correctly is crucial, including offline mnemonic storage, trusted purchase channels for the device, and verifying signatures before upgrading firmware.

#Coldcard#HardwareWallet#BTC

Hardware wallet manufacturer Coldcard releases an update announcement to its customer data retention policy.

Due to legal compliance requirements triggered by the security incident disclosed on July 30, the company has temporarily suspended its original automatic customer data deletion mechanism.

Previously, Coldcard’s standard practice was to automatically clear customer records after 120 days, retaining only the customer’s email address and country information, and allowing customers to request early deletion of data at any time after product delivery.

Because the security incident involves legal proceedings that are ongoing and may occur, the company is obligated to preserve records that may be related to litigation. Customer data that would originally have been cleared according to the regular schedule will be temporarily retained until the law allows normal procedures to resume.

Users may still request that Coldcard handle their personal information according to the original data retention policy.

#Coldcard#hardware wallet#data security

【2.1 billion BTC suddenly moved! Coldcard incident keeps intensifying, old wallets are “waking up” together? 😱🪙】

The Coldcard security incident,
its impact is still expanding. 💥

📲每日策略热点聊天室🚀🔥

Latest on-chain data shows that
more than 210,000 BTC have suddenly been transferred out from long-dormant wallets. 🚨

Based on the current price,
this batch of bitcoins is worth as much as several tens of billions of dollars! 💰

Many people’s first reaction is:
👉 Are the whales going to dump?

Actually,
it’s not that simple.

Analysts believe
this wave of transfers is more likely caused by
an issue related to the Coldcard security vulnerability.

Many long-term holders
are worried about the safety of their assets,
so they start moving BTC to new wallets,
not preparing to sell immediately.

In other words,
transfer ≠ sell. 🙅‍♀️

But why is the market still so tense?

Because 210,000 BTC is not a small amount.

Once a large portion of these funds flows into exchanges,
selling pressure on the market could increase significantly.

So what’s really worth watching now is:

📌 Are these BTC being moved into exchanges?
📌 Or are they only being switched to new cold wallets?
📌 Will more old wallets start moving afterward?

On-chain data shows that
more signs currently point toward:

👉 Funds are being reorganized, not mass-selling. 💰

However,
until the security incident has fully calmed down,
market sentiment may still be affected.

📌 The Coldcard incident not only exposed wallet security problems,
it also caused a large amount of BTC that had been sleeping for years to start moving again. What’s truly worth watching isn’t the transfers themselves, but where these bitcoins ultimately go—because what affects the market is never that wallets “woke up,” but whether the coins enter the market. 🚀

📲 Join the livestream! 🔥
Every day, first thing, I’ll help you understand the crypto market’s hot topics, BTC trends, on-chain data, and institutional fund flows, in the simplest way—so you can grasp the next opportunity! 📈🔥
#Coldcard #美国初请失业金人数维持20万以下 #Coldcard事件损失超1亿美元 #Coldcard暂停发货并销毁问题固件 #参议院谈判推迟CLARITY法案表决

64.9 BTC were sent into Wasabi, and 200 ETH were sent into Tornado. Coldcard ended up among the stolen-funds pool—mixing at last has moved.

Key figures are shown in the cover and in the正文 配图.

【What the topic is about】
Blockchain security monitoring indicates that, among the funds related to the Coldcard hardware wallet vulnerability, about 64 to 64.9 BTC were transferred into the Wasabi mixing protocol, and about 200 ETH were transferred into Tornado Cash. In public accounts, this BTC mixing took place around August 5, while the ETH mixing fell within the August 4–5 window.
Based on rough prices at the time, this batch of BTC was on the order of a few million (around $4 million-plus), while the ETH was on the order of a few hundred thousand (around $300k-plus). Compared with the total cumulative loss in the hundreds of millions, this looks more like a probing shipment than a main-boot load clean-out.

【First, set the event’s foundation straight】
The attack began around July 30, 2026. Public post-mortems point to a firmware construction problem in Coinkite Coldcard around March 2021. Seed generation landed in an underpowered software pseudo-random number generator: the effective entropy fell from the designed 128 bits down to roughly the 40-bit range of older devices, making remote brute-force attacks feasible—without needing to touch your physical machine.

According to Galaxy Research and TRM Labs, repeated sweeps cumulatively hit about 1,816 BTC, totaling roughly $116 million, across more than 5,200 addresses. Other reporting puts the totals across three to four waves in the $100–130 million range. Transaction construction differs between rounds. Industry-side reporting suggests multiple people were involved, and even imitators; CertiK has also publicly mentioned the possibility of small-scale users and copycats.

【What mixing implies】
Mixing protocols pool users’ funds together, cutting the public on-chain linkage between sending addresses and receiving addresses. The difficulty of tracing and labeling increases.

TRM’s public description is especially striking. Most of the victim funds still concentrate in a small number of addresses controlled by the attackers; mixing attempts so far appear limited. The main named instance is the ~64.9 BTC sent into Wasabi, plus the 200 ETH sent into Tornado. CertiK interprets the related transfers as actions by smaller users. Whether the main attacker has already laundered on a large scale remains unsupported by the available public materials.

【How to read this for the market and users】
For market conditions: this mixed batch is small relative to BTC’s daily trading volume, more like noise from a security narrative. In the short term, don’t write it directly as the main cause of a sell-off.

For holders: updating firmware only protects seeds generated in the future. Seeds generated by old firmware can’t be covered by a patch. Public guidance is to generate brand-new seeds on the already-fixed firmware, then move funds. Multi-sig, sufficiently independent dice-entropy sources, and strong BIP-39 passphrases are discussed separately in the public post-mortems.

For the narrative: hardware wallets are not immune. Cold storage still depends on how the seed is generated—where the entropy comes from—and whether there is a second layer of protection.

【Observation checklist】
Watch three things. First, whether the main-archive addresses continue to batch-transfer into Wasabi or similar protocols. Second, whether downstream addresses show fast CEX deposit traces after mixing. Third, whether the vendor and subsequent chain security actions further tighten the scope of the victim-address list and the firmware impact surface.

Expiration reminder: don’t only focus on the 64.9 BTC mixing activity and ignore the fact that over a thousand BTC are still sitting on attacker addresses—otherwise you’ll underestimate the uncertainty around future sell pressure and the enforcement window.

Do you think this is a small crew’s trial run, or the prelude to a large-scale mixing wave?

Not investment advice.
Dragonfly Captain｜A finance blogger who likes analyzing data and candlestick charts.
Welcome to follow, like, and save.
#Coldcard #混币协议 #链上安全 #hardware wallet

Loss caused by the Coldcard attack pushes July losses to $247 million

- Exploitation of the Coldcard vulnerability caused losses of more than $100 million.
- Total crypto theft losses in July reached $247 million.
- July 2026 is the second-highest month for losses in the year.

#BinanceSquare #CryptoNews #Coldcard #CyberSecurity

$btc $eth

#vlikevn Titanbot

Source: CoinTelegraph

Coinkite, the manufacturer of Coldcard cold wallets, said it is focusing on preparing a detailed analysis report into the security incident that has been ongoing for days, rather than speculating about the extent of damage to customers.

According to Bloomberg, the company’s side is prioritizing clarifying the technical causes and reviewing security vulnerabilities before making any official estimates of users’ asset losses.

#Coinkite #Coldcard #CryptoNews

$XRP $NEAR $SUI

41 minutes. $70 million.

It wasn’t the exchange that got hacked. It wasn’t a hot wallet that was stolen. It was Coldcard—the crypto world’s most hardcore hardware wallet. Offline signing. Physical isolation. Air-gapped. The kind that should be unbreakable.

Then it happened.

Fox Business and TechCrunch both reported it. Galaxy Research traced the on-chain addresses. On July 30, 1,196 wallets were swept in 41 minutes. Later it was found there were a second and third wave of attacks. By this Tuesday, total losses have already exceeded $130 million. Forbes, CBC, and The Hacker News all put it on the front page.

The vulnerability dates back to March 2021. Coinkite made an integration mistake in its firmware—seed generation was routed incorrectly to a software pseudo-random number generator, instead of the STM32’s hardware true random number chip. Block’s security team’s plain-English version: the seed can be predicted. No quantum computers needed. No nation-state hackers needed. Just brute force on a normal computer.

The affected models are Mk4, Q, Mk3, Q1, and Edge. Seeds created between March 2021 and May 2023. Coinkite released an emergency firmware patch on July 31. But the patch can’t fix already-generated old seeds—cryptography is cryptography; once seed generation is done, it’s done. The exposed seeds must be rebuilt.

So far, at least 12 different attackers are sweeping these addresses. Galaxy says they’re still monitoring continuously, and the attacks are still running. TRM Labs reports that from 2026 to now, there have been more than 200 crypto-hacking incidents, with total losses of $950 million. Coldcard accounts for 13% of that. The third-largest hacking incident this year.

The most ironic part is the mindset of these victims. They did everything right. Didn’t keep coins on exchanges. Bought a hardware wallet. Pulled the network cable. Signed offline private keys. They thought they were safer than 99% of crypto users. Then they were told that the first line of defense—seeds not being random enough—failed at the firmware level. After that, all the other security measures were just for show.

Coinkite’s official website now has a warning up. All seeds created during the affected time period are now invalid. Move your funds immediately. But on-chain data shows many addresses still haven’t been touched—either the victims haven’t realized it yet, or the private keys are lost and they can’t move anything.

$BTC #Coldcard #Security #Bitcoin

Coldcard hackers are active again!

According to Lookonchain monitoring, the Coldcard hacker address that previously stole 2,055 BTC (about $130 million) initiated another transfer an hour ago, moving 30.185 BTC (about $1.94 million) into a new wallet.

After a long period of inactivity, the wallet suddenly showed movement, prompting the community to closely watch where the funds will go next. On-chain tracking indicates that the hacker is transferring the stolen funds in batches, possibly in preparation for laundering or selling off.

There is no privacy on-chain, and security is never absolute. Even if you use a hardware cold wallet, physical-layer vulnerabilities may also be exploited. Holders are advised to regularly check for firmware updates and to follow official security announcements.

#BTC #链上安全 #Coldcard