Coldcard Weak-Entropy Seed Exploit
A 2021 Coldcard firmware build flag disabled the hardware RNG, weakening wallet seeds enough to brute-force offline. Attackers drained ~1,816 BTC (~$116M) from 5,200+ addresses.
Loss
116.0M
USD
Victim dossier
Coldcard (Coinkite) hardware wallet users
Total losses
$116.0M
1 incident