A firmware bug in Coldcard hardware wallets caused seed phrase generation to rely on weak randomness instead of true hardware randomness, allowing attackers to brute-force private keys and drain $70 million in Bitcoin from nearly 1,200 wallets without ever accessing the physical devices. The attack, which occurred on July 30, 2026, represents a watershed moment in on-chain security: it proved that even devices designed to be completely isolated from the internet can be compromised if their foundational cryptography is flawed.

What Went Wrong With Coldcard's Seed Generation?

When a hardware wallet creates a new wallet, it is supposed to generate a seed phrase, a random string of words from which all private keys derive. This seed must be so unpredictable that guessing it is computationally impossible. Coldcard's firmware, however, contained a critical bug that caused seed generation to skip the device's dedicated hardware random number generator and fall back to a weak software alternative.

The software substitute was seeded from the Coldcard chip's serial number and clock registers, both of which are either fixed factory metadata or timing values an attacker can measure or narrow down. On older Mk2 and Mk3 models, this reduced the possible key space to a brute-forceable range. On newer Mk4, Q, and Mk5 models, the vulnerability created roughly four billion possible seed combinations, a number that sounds large to humans but is trivial for computers to enumerate.

The bug affected Coldcard Mk3 devices starting with firmware version 4.0.1 in March 2021, producing seeds with only approximately 40 bits of entropy instead of the intended 128 bits. This made private keys for many single-signature wallets predictable enough for attackers to brute-force, especially for wallets created without dice rolls or a strong BIP-39 passphrase.

How Did the Attack Actually Happen?

The attack was remarkably elegant in its simplicity. An attacker generated candidate seeds on their own hardware, derived the addresses each seed would produce, and checked those addresses against the public blockchain, which anyone can download. Every step of this process ran entirely on the attacker's machine. The victim's Coldcard device was never involved and could have been powered off in a safe on another continent.

Galaxy Research, a blockchain analysis firm, mapped the full scope of the theft. More than 1,082.65 Bitcoin, worth approximately $70 million, were swept from 1,196 wallets between 01:10 and 01:51 UTC on July 30, 2026, across six blocks. The proceeds sat in four addresses and have not moved. The attack pattern revealed systematic enumeration: of the drained wallets, 1,183 used the modern native segwit address format, seven used an older standard, and six used an even older format. Nobody targets a specific victim across three address formats at once, indicating the attacker was checking every candidate seed against every possible derivation path.

Investigators traced the attacker through logs from a blockchain data provider. Clay Garrett, a security researcher at Block, stated that the operator used a paid account at a well-known blockchain services provider to query the source addresses during the sweeps, and that the provider's internal logs matched the suspected workflow with extraordinary specificity, down to the number, timing, and sequence of requests.

Why This Attack Is Different From Most Crypto Thefts

Most cryptocurrency theft involves breaching an exchange, tricking a smart contract, or phishing a private key off a laptop. The defense has always been distance: keep the key on a device that never connects to the internet, and theoretically there is nothing for an attacker to touch. That is the entire value proposition of a hardware wallet.

The Coldcard exploit shattered that assumption. The attacker never needed to touch the device, never needed to phish the user, and never needed to compromise any network. The vulnerability existed in the foundational randomness that the device was supposed to provide. Once that randomness was weak, the entire security model collapsed, and the attacker could work entirely offline.

What Should Affected Users Do Right Now?

Coinkite, the company behind Coldcard, has issued urgent guidance for users. The situation depends on how the user generated their seed phrase:

• Dice Roll Method: If you generated your seed using the dice roll method with at least 50 dice rolls, your wallet is safe. Only wallets generated using this method are secure, assuming you rolled at least 50 dice.
• No Other Hardware Wallet Available: If you do not have another hardware wallet, generate a passphrase using a minimum of six seed words from the BIP-39 word list. Do not pick them yourself; use a guide to select your words. Check your wallet fingerprint, power down your device, restart it, and re-enter the passphrase. Confirm that the fingerprint matches, then send your funds to the passphrase wallet. This is not a permanent solution but gives enough security that an attacker cannot brute-force your keys in a matter of days.
• Software Wallet Alternative: If you have no other options or are uncomfortable using the device at all, consider moving funds to a software wallet such as Nunchuk, Blockstream Green, or Bluewallet. Take your time, ensure all backups are done properly, and verify backups before sending funds.

Wallets are actively being drained. Galaxy Research warned that further waves are likely if owners do not move their funds immediately. The critical problem is that there is no test an owner can run against their own wallet to determine whether their seed sits inside the reproducible range. Anyone who generated a seed on affected firmware must assume the worst rather than verify it.

Can Coldcard Be Trusted Again?

Coinkite has released a firmware patch that addresses the vulnerability. Any seed phrase generated after this firmware update should be secure, and users can use the dice roll option as well. However, the damage to trust is significant. Kevin Loaec, CEO of Bitcoin security company Wizardsardine, warned that "every single mnemonic generated via a Coldcard since 2021 will be public in the next few days".

Kevin Loaec, CEO of Bitcoin security company Wizardsardine

Once users have secured their own funds, Coinkite and the Bitcoin community have urged them to reach out proactively to anyone they know who might be using a Coldcard that was vulnerable when they generated their seed. Many people do not pay attention to Bitcoin news regularly and may be unaware that they are even vulnerable.

What Does This Mean for Hardware Wallet Security Broadly?

The Coldcard exploit highlights a fundamental shift in cryptographic security. Cold storage promises that a key is unguessable, but everyone read it as a promise that a key is unreachable. The cost of finding and exploiting flaws in the first kind keeps falling. Anthropic, an AI safety company, published research showing one of its AI models halving the security of a candidate post-quantum algorithm in 60 hours, against a design that had survived two years of expert review.

Storing a key safely is now the easier half of the problem. The harder half is ensuring that the randomness used to generate that key is truly random, that the firmware implementing that randomness is correct, and that no subtle bugs or configuration errors undermine the entire security model. The Coldcard incident demonstrates that even well-intentioned hardware manufacturers can miss critical flaws in their randomness implementation, and that once those flaws exist, they can be exploited at scale without the attacker ever touching the device.