Aug 2, 2026
A security flaw in Coldcard's Mk3 hardware wallet, introduced in firmware version 4.0.0 in March 2021, enabled attackers to steal between $38-70 million worth of bitcoin from hundreds of wallets by exploiting predictable key generation. The vulnerability affected wallets that used the device to generate seed phrases, prompting urgent warnings for users to move funds to newly generated wallets.
A security flaw in Coldcard's Mk3 hardware wallet, introduced in firmware version 4.0.0 in March 2021, enabled attackers to steal between $38-70 million worth of bitcoin from hundreds of wallets by exploiting predictable key generation. The vulnerability affected wallets that used the device to generate seed phrases, prompting urgent warnings for users to move funds to newly generated wallets.
The DOJ charged Bulgarian national Rossen Iossifov, currently serving 111 months for fraud, with conspiring to move approximately $290,000 in cryptocurrency that had been seized and forfeited to the US government.
TRM Labs reports that North Korean state-backed hackers stole $577 million in two April exploits (including the $285 million Drift hack), representing 76% of all crypto losses in 2026. The regime has now stolen over $6 billion in cryptocurrency since 2017.