Coinkite

Organization · 22 articles

Coldcard issues Mk3 warning as experts examine $38M Bitcoin wallet drain

Coinkite urged Coldcard Mk3 users to migrate funds after identifying a potential seed-generation risk, as Bitcoin security experts separately examine an unexplained $38 million wallet drain.

All coverage

page 1 of 2

Coinkite’s Coldcard Bug Exposed Single-Sig Risk. Multi-Vendor Multisig Is the New Bitcoin Custody Baseline

Bitcoin Magazine Coinkite’s Coldcard Bug Exposed Single-Sig Risk. Multi-Vendor Multisig Is the New Bitcoin Custody Baseline Coinkite now forces dice rolls and key-press entropy on new Coldcard seeds. The lasting lesson from the July–August 2026 thefts is not to abandon self-custody — it is to stop generating every key on one vendor. This post Coinkite’s Coldcard Bug Exposed Single-Sig Risk. Multi-Vendor Multisig Is the New Bitcoin Custody Baseline first appeared on Bitcoin Magazine and is written by Juan Galt .

Bitcoin Magazine•Juan Galt26 Aug

Coldcard Firmware 5.6.1 Forces User Entropy Into Every New Seed After $100M Exploit

Coinkite has released new Coldcard firmware that forces users to provide their own randomness when generating new wallet seeds.

CryptoPotato•Jose Oramas22 Aug

Coldcard Adds New Security Measures After $130 Million Bitcoin Exploit

Coinkite's latest firmware requires users to add their own randomness when generating wallet seeds and fixes additional security issues uncovered during a three-week review.

Decrypt•Jason Nelson21 Aug

Coldcard Ships Deeper Security Fix Following Bitcoin Heist

Coinkite's new firmware adds hand-entered entropy and stricter transaction checks to its Coldcard wallets.

Bankless•Bankless21 Aug

Coldcard strengthens seed generation with firmware update

Coinkite urged Coldcard users to generate new seed phrases, warning that existing vulnerable seeds remain unsafe despite the security upgrade.

Cointelegraph•Cointelegraph by Zoltan Vardai21 Aug

Coinkite declines to estimate Bitcoin loss from $130M Coldcard hack

The Coldcard hack highlights the urgent need for regulatory standards in hardware wallet security to protect investors and maintain trust.

CryptoBriefing•Editorial Team6 Aug

Bitcoiners are worried that Coinkite’s Blockclock could be spying on them

Paranoid Bitcoiners are worried that the Blockclock, created by Coinkite, the firm behind Coldcard, could be spying on them.

Protos•Jacob Lyon5 Aug

Coldcard crisis hits $130 million – proving ‘not your keys’ is meaningless if you trust a single device to generate them

Block's Bitcoin Engineering and Security team and independent Bitcoin Core developers have traced the recent batch of Coinkite Coldcard wallet losses to a specific firmware defect that exposed a hidden weakness in Bitcoin self-custody before any user touched a seed phrase. The bug diverted the device's random-number generation from its STM32 hardware source to MicroPython's […]

CryptoSlate•Gino Matos4 Aug

The Coldcard Hack Just Hit $116 Million. A Fourth Wave Is Still Draining

The Coldcard hardware wallet hack has grown to $116 million (potentially more) across four separate waves, and Coinkite says the last three days have been among the hardest in the company’s history. Four Waves in Four Days What started as an estimated $30 million theft has more than tripled in less than a week. Bitcoin.com […]

Bitcoin.com News•Shiraz Jagati4 Aug

Coldcard Hacker Gets Brazen Bitcoin Laundering Offer Onchain

The Coldcard security incident entered another chapter after a public bitcoin transaction offered laundering services to the thief behind one of the largest self-custody bitcoin thefts ever recorded, while users also reported emergency firmware updates leaving some hardware wallets unusable. The new developments come just days after Coinkite disclosed that a long-dormant firmware flaw had […]

Bitcoin.com News•Jamie Redman2 Aug

Coinkite Faces Class Action Threat as Bitcoin Wallet Bug Costs Users Over 1,300 BTC

Coinkite, the company behind Coldcard, the hardware wallet affected by a vulnerability in its seed generation code, might face legal action from victims who have lost over $88 million in BTC over the last two days. Users Prepare To Exert Legal Action Against Coinkite Over Coldcard Vulnerability Coinkite, the company behind the Coldcard series of […]

Bitcoin.com News•Sergio Goschenko2 Aug

Coldcard’s $89M wallet bug triggers the biggest Bitcoin movement since FTX and completely distorts market signals

Coldcard’s wallet crisis has shaken Bitcoin sentiment, blurred on-chain signals and exposed a recurring weakness in AI-assisted cyber defenses. On July 30, hardware maker Coinkite warned users that wallets generated with affected Coldcard firmware could be drained because a software error produced seed phrases with far less randomness than intended. This security incident, Galaxy Research […]

CryptoSlate•Oluwapelumi Adejumo2 Aug

Coinkite Under Fire for Retaining Customer Emails After $88M Coldcard Hack

The company, which is facing issues with its Coldcard wallet, sent security notices to customers to warn them about the high risk of losing their bitcoin. Nonetheless, Rodolfo Novak, co-founder and CEO of Coinkite, had assured that the company retained customer data for just 90 days after a purchase. Coinkite Faces Criticism For Leveraging Customer […]

Bitcoin.com News•Sergio Goschenko2 Aug

A build error in Coldcard’s firmware drained $38 million in bitcoin in 25 minutes

Coinkite says an attacker used AI to find a flaw its own AI review missed, exposing 500 wallets to a seed generation bug that reduced 128 bits of entropy to 40. Summary An attacker drained 594 BTC, approximately $38 million,…

Crypto.news•Andrew Folkler1 Aug

Coinkite Releases Fixed Firmware After Coldcard Bug; AI Likely Involved In The Breach

Bitcoin Magazine Coinkite Releases Fixed Firmware After Coldcard Bug; AI Likely Involved In The Breach NVK stated that AI-assisted code review can now find latent bugs at a speed outpacing even the industry’s most seasoned experts, calling it a sober reality of the new AI paradigm. This post Coinkite Releases Fixed Firmware After Coldcard Bug; AI Likely Involved In The Breach first appeared on Bitcoin Magazine and is written by Juan Galt .

Bitcoin Magazine•Juan Galt31 Jul

Coinkite reports $38M in Bitcoin drained due to Coldcard key generation flaw

The incident underscores the critical need for robust security measures in hardware wallets, potentially boosting multi-signature adoption.

CryptoBriefing•Editorial Team31 Jul

A flaw in Coldcard seed generation lets attackers recreate private keys from the press of a button

Some Coldcard Mk3 owners may need to move their Bitcoin. Coinkite says funds tied to seeds generated on firmware 4.0.1 or a later Mk3 release may be at risk. Bitcoin Core contributor instagibbs said he recreated the vulnerable seed on a newly initialized Mk3. Coinkite says Mk4 and Mk5 devices are also affected before firmware […]

CryptoSlate•Gino Matos31 Jul

$38M in Bitcoin Drained by Coldcard Key Flaw Its Maker Thinks AI Found

Coinkite said it’s likely that an attacker used AI to review previous versions of its open source firmware to uncover a vulnerability.

Decrypt•Decrypt Agent31 Jul

Coinkite Warns Coldcard Mk3 Owners After Reports of $38M Bitcoin Loss

Coinkite issued a security advisory Thursday warning owners of its Coldcard Mk3 hardware wallet that funds tied to certain firmware versions may be at risk. Hardware wallet incidents rarely unfold as isolated events. When long-dormant addresses begin moving in a tightly coordinated pattern, the timing alone warrants scrutiny. That was the case on July 30, […]

Bitcoin.com News•Jamie Redman31 Jul

‘Funds may be at risk’: Coinkite issues warning for Coldcard Mk3 users amid 594 BTC theft reports

Coinkite recommends that Mk3 users create a strong, unique BIP-39 passphrase on the device and move funds to the resulting wallet.

The Block•Danny Park31 Jul