Post

Coldcard hardware wallet flaw sees more than 1,367 BTC (~$89 million) drained across thousands of wallets July 31, 2026 https://www.web3isgoinggreat.com/?id=coldcard-hardware-wallet-flaw

2/8/26, 8:24 pm10 reposts72 likes

naugtur

@naugtur.pl

3 Aug

Random quality randomness 🙈

naugtur

@naugtur.pl

3 Aug

Saw folks share this: x.com/gegelsmr4/st... No idea if trustworthy source, but funny if true.

x.comGégéLSMR (@gegelsmr4) on XNVK used open-source code from Trezor to build Coldcard. Then Foundation forked Coldcard’s code to create Passport. NVK got mad and switched Coldcard to a Commons Clause license so competitors could...

Nathan Dickson

@nathandickson.bsky.social

2 Aug

I blame the lax oversight on Coldcard's codebase, thanks largely to Rodolfo Novak's hubris. That guy is screwed and Coldcard is likely going out of business, sued into oblivion.

Exit Velocity

@exitvelocitybtc.bsky.social

30 Aug

Update for anyone finding this now: 1,367 BTC was an early tally. Independent counts through mid-August put confirmed losses above 115 million dollars. It ran in waves rather than as one event, because the flaw was in seed generation - affected keys were enumerable from the day they were made.