Community curated by people like you

Coldcard MK5 stories

Jul 31, 2026

Coldcard hardware wallet flaw drains 594 BTC in 25-minute sweep

Coinkite warns users of Coldcard Mk3 signing devices to move funds after an attacker exploited a firmware vulnerability to drain $38 million in Bitcoin from old wallets in a coordinated 25-minute sweep.

Jul 31, 2026·4 sources

00

Top claims

▪Block's investigation identified security flaws in multiple generations of Coldcard wallets, including the Mk2, Mk3, Mk4, Q, and Mk5
▪The flawed software-based key generation was seeded with non-secret data, including the chip's serial number and clock registers
▪Importing a compromised seed into a new wallet does not eliminate the threat, as the seed itself remains vulnerable

Subtopics

Bitcoin1 Bitcoin security & risks1 Bitcoin wallets & custody1 Crypto hacks1 Hardware wallet vulnerabilities1

Related timelines

AI Data Center Gold Rush

Congress

Crypto hacks

Ebola outbreak

Iran War