Community curated by people like you

Galaxy Research stories

Aug 16, 2026

Coldcard Bitcoin hardware wallet breach results in over $115 million in losses

A security flaw in Coldcard hardware wallets has led to the theft of over $115 million in Bitcoin, with 1,778.58 BTC swept from 8,680 addresses since July 30. Galaxy Research has been tracking the incident and supporting over 200 victims.

Aug 16, 2026·5 sources

00

Top claims

▪The Coldcard vulnerability occurred because a safety check failed to detect that the hardware generator was disabled, forcing seed generation to fall back to a weak software generator.
▪Coinkite's Coldcard Mk3 hardware wallets shipped with a flawed firmware version 4.0.1 on March 17, 2021, which silently went undetected for five years.
▪Galaxy Research reported that Coldcard hardware wallet losses exceeded $115 million, representing 1,778.58 Bitcoin swept from 8,680 addresses between July 30 and August 13, 2026.

Topics

Bitcoin wallets & custody Bitcoin security & risks Hardware wallet vulnerabilities Bitcoin