Coldcard Thefts: Is Your Hardware Wallet Really Safe?
Coldcard Thefts Explained: Hardware Wallet Risks and Lessons
The Coldcard thefts did not hack the devices. Attackers exploited weak seed phrases created by a firmware bug and rebuilt the private keys offline.
A wallet is at risk if its seed was made on affected firmware without 50 independent private dice rolls or a strong passphrase. Updating firmware alone does not repair an existing-seed.
The Coldcard thefts shook a corner of crypto that treated hardware wallets as the safe choice. This guide explains what failed, who is exposed, and which habits protect any device. Readers can follow crypto news for later developments.
Where Things Stand
fixed firmware for every affected model and release track
In development: the manufacturer's entropy estimates, which it calls preliminary, and final loss tallies
The ColdCard's security status page lists current fixed releases. Anyone touched by the Coldcard thefts should start there rather than with a summary.
A Timeline of the Incident
March 2021: a code migration changes how seeds are generated
July 2026: thefts occur, users notice drained wallets, and the manufacturer issues an advisory followed by fixed firmware
August 2026: a technical deep dive explains the root cause, and official guidance is revised, which is the reference used here
How Much Was Taken? Two Totals, Explained
One early report described about 594 BTC leaving roughly 500 wallets in a single quick wave. A later on-chain incident analysis put losses near 1,816 BTC, about $116 million, across more than 5,200 addresses in four waves.
The numbers do not conflict. The first covers the opening wave, and the second covers later waves. Dollar values also depend on the Bitcoin price when each figure was published, and other tallies landed slightly lower.
The Coldcard thefts became widely described as the largest hardware wallet exploit on record, though final totals remain open.
The Bug: One Missing Check, Five Quiet Years
The manufacturer's technical post explains the root cause. A 2021 change moved seed-creation onto a new code path. A build setting meant to switch off a software random generator did not do so, because a safety check tested whether the setting existed rather than what value it held. The software generator, which is not designed for security, supplied the randomness instead of the hardware chip.
Reviews missed it because both generators shared the same function name. Reviewers confirmed the correct code existed in the firmware but did not trace which version the seed-process actually reached. The fix adds a build-time check that fails if the wrong generator appears.
The manufacturer says the devices were never remotely accessed. The Coldcard thefts came from guessing seeds offline, not from breaching hardware.
Why the Hardware Could Not Save Them
A hardware wallet shields keys from malware and phishing. It cannot protect a seed it created badly. Entropy is the unpredictability used to build a seed, and a weak source shrinks the number of possibilities an attacker must try.
The manufacturer estimates about 40 bits of effective entropy on Mk2 and Mk3 and about 72 bits on Mk4, Mk5, and Q, against a 128-bit target.
Forty bits means roughly one trillion possibilities, a range modern computers can search. These estimates are preliminary, but they explain why the Coldcard thefts spread so fast.
Who Is Affected? Check Your Firmware
Early reports gave wider ranges than the manufacturer's August 2026 guidance, which is the reference here. For the Coldcard thefts, the affected window depends on model and firmware at seed-creation.
Standard and Edge are separate release tracks, so a higher Edge number does not mean it is fixed. Three products, Tapsigner, Opendime, and Satscard, are not affected because they use different codes.
The Dice and Passphrase Exceptions
The manufacturer says a seed is not at risk from this issue alone if it was created with at least 50 independent, private dice rolls.
Read the official guidance before relying on that exception, because the conditions are specific.
A strong passphrase reduces exposure but does not repair a weak seed. It must be unique, secret, and stored apart from the seed words; reused or patterned passphrases do not count. Adding dice rolls later does not fix an existing seed either.
Your Move: A Safe Migration Plan
Follow the official migration guide and the firmware downloads page:
Update firmware first, then generate a completely new seed
Record the new backup and verify the wallet fingerprint and a receive address
Send a small test transaction before moving the rest
Keep the old backup until everything is confirmed
Copying the old seed to a new device does not help, because the seed is the weakness. Scammers also pose as support after incidents, as AI crypto scam coverage explains.
Confirmed Facts vs. Open Questions
Confirmed by the manufacturer: the 2021 code change, the software generator, the fixed releases, and the migration steps.
Independently tracked: the stolen totals. Still uncertain: final losses, who the attackers were, and the exact entropy figures.
The manufacturer also says it must assume attackers used AI to review its public code, noting that its own earlier AI review missed the flaw.
That remains an assumption, not a proven fact. In any case, the Coldcard thefts show that open source does not guarantee a flaw is found by defenders first.
What About Other Hardware Wallets?
The flaw lived in one manufacturer's firmware, and other devices use different codebases. That is not a guarantee of safety.
Owners of any brand should read their maker's security notices and follow their own device's documented seed process, since entropy options differ between wallets. Splitting a multisig setup across makers can also reduce dependence on any single flaw.
Security and Risk Considerations
A firmware update never repairs a seed generated earlier
A weak passphrase offers false comfort
Moving funds slowly can lose a race with an attacker, so avoid delay once a seed is known to be weak
Fake support messages exploit panic after every incident
No device makes every wallet safe after the Coldcard wallet.
Conclusion: Verify the Randomness
The Coldcard thefts exploited a weak seed, not a broken protocol. Anyone with an affected Coldcard should migrate using official steps, and anyone without one should still review their maker's notices.
Readers meeting new terms can use the crypto dictionary. Fresh, verified randomness is the real foundation of self-custody.
Disclaimer: This article is for information only and is not financial, security, tax, or legal advice. Cryptocurrency prices are volatile, security details change, and readers should verify all information with official sources and consult a qualified professional before moving funds.
