Awareness: Coldcard Bitcoin wallets got drained
A bug in some Coldcard hardware wallets (Bitcoin-only) let attackers empty hundreds of wallets. Around $38–70 million in BTC was taken from dormant single-signature wallets in a short time.
The problem was in how the devices created the secret recovery phrase years ago. Some versions made weaker phrases than they should have, and those became guessable.
Even if you only hold BCH and use a hot wallet, this is still worth knowing:
- Hardware wallets aren’t perfect either
- Leaving coins sitting for years doesn’t make them safer
- One key controlling everything is always a risk
- Good habits (strong backups, testing small amounts first, not rushing) matter on any chain
If you use a Coldcard, check the official advisory and move carefully to a new phrase if needed.
If you don’t — just take it as a reminder that security needs attention, no matter what you hold.
Stay safe.
https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
A bug in some Coldcard hardware wallets (Bitcoin-only) let attackers empty hundreds of wallets. Around $38–70 million in BTC was taken from dormant single-signature wallets in a short time.
The problem was in how the devices created the secret recovery phrase years ago. Some versions made weaker phrases than they should have, and those became guessable.
Even if you only hold BCH and use a hot wallet, this is still worth knowing:
- Hardware wallets aren’t perfect either
- Leaving coins sitting for years doesn’t make them safer
- One key controlling everything is always a risk
- Good habits (strong backups, testing small amounts first, not rushing) matter on any chain
If you use a Coldcard, check the official advisory and move carefully to a new phrase if needed.
If you don’t — just take it as a reminder that security needs attention, no matter what you hold.
Stay safe.
https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
3❤️7
