Warm Welcome, Tagus Community, August 04, 2026
Coldcard Wallet Exploit Renews Self-Custody Safety Debate: Confirmed losses from the ongoing Coldcard hardware wallet exploit have so far exceeded $100mn, with approximately 1,596 BTC stolen across thousands of addresses in multiple attack waves. A suspected additional wave could push total losses towards $130mn, although the incident remains active as more affected wallets are identified. The exploit traces back to a March 2021 firmware flaw that weakened the randomness used to generate recovery seeds, allowing attackers to reconstruct private keys offline and drain affected wallets without physical access. Around 90% of stolen Bitcoin remains unmoved, enabling continued tracing while vulnerable users rush to migrate funds. The recent jump in active Bitcoin addresses on centralised exchanges (CEX) stems from smaller Bitcoin holders moving funds to seek custody safety following the Coldcard hardware hack, rather than serving as signs of liquidation. As discussed below, the incident has also reignites Bitcoin’s long-standing debate over the balance between sovereign ownership and operational security.
