Coldcard Hardware Wallet Flaw: $70M Bitcoin Theft Linked

This report describes a Coldcard hardware-wallet firmware flaw introduced in March 2021 that replaced the STM32 hardware RNG with a predictable software PRNG during seed generation, enabling attackers to reconstruct vulnerable seeds and resulting in a coordinated theft of ~1,082.65 BTC from 1,196 addresses on July 30, 2026; Coinkite issued emergency firmware updates and recommends generating new seeds and migrating funds.