Unchained · Thursday, August 6, 2026
The hardware wallet manufacturer Coldcard has experienced a significant security breach, with approximately $100 million in Bitcoin being drained from user wallets. A vulnerability in the device's random number generation (RNG) system, introduced five years ago, allowed for the creation of weak private keys that were easily crackable.
“Coldcard, very unfortunately, so Coldcard is a is a very minority vendor in the wallet space. They only do Bitcoin wallets.”
“Now, they suffered unfortunately a very massive exploit. It looks like so far, there's been almost $100 million dollars in Bitcoin that's been drained from Coldcard wallets.”
“And basically, it went from a hardware wallet that's normally using very robust on device RNG or random number generation, which is the entropy that's used to generate the key, and instead fell back to some very weak software based random number generation, which is very easy to crack.”