Coldcard Firmware Bug Linked to $70M+ Bitcoin Drain

Hardware wallet users lost more than $70 million in Bitcoin (BTC) after attackers exploited a flaw in Coldcard firmware that enabled remote fund drains. CoinKite said some impacted devices generated recovery seeds using software-based randomness rather than the device's built-in hardware random-number generator. The problem traces back to firmware released in March 2021. While newer firmware fixes the bug, it does not protect recovery seeds already created on affected devices. Galaxy Research reported 1,082.65 BTC was swept from 1,196 addresses in about 41 minutes. Changpeng Zhao noted that hardware wallets can still contain bugs and suggested splitting funds across multiple wallets, while cautioning that this approach introduces its own trade-offs. Why it matters: A weakness in seed generation can undermine confidence in self-custody, since users cannot remediate compromised or weak legacy seeds through a firmware update alone. Market sentiment: Bearish; stress-on; event-driven; fear. The incident creates immediate security pressure for self-custody users after more than $70 million in BTC was drained. Similar past case: In the 2023 Atomic Wallet hack, users lost more than $35 million as multiple wallets were drained across several assets (Fortune). Unlike Atomic Wallet, the Coldcard case centers on firmware-generated recovery seeds rather than a software wallet compromise. Ripple effects: First, self-custody confidence may weaken as a seed-generation issue makes offline storage appear less insulated from software risk. If further sweeps occur even after emergency patches, attention may broaden from a single firmware bug to how users replace recovery seeds. Second, custody behavior could shift as users reassess the operational risk of storing funds on a single device. Opportunities & risks: Opportunities: If CoinKite updates indicate new drains are contained, stabilization in self-custody confidence could become a potential entry signal for users tracking wallet-infrastructure exposure. Risks: If legacy recovery seeds remain in use or additional sweeps emerge, reducing dependence on a single-wallet setup may help limit downside from another drain.