Coldcard wallet vulnerability losses could reach about 2,055 BTC, or roughly $130 million
Galaxy Research said a vulnerability affecting Coldcard hardware wallets could drive losses to about 2,055 Bitcoin, valued at approximately $130 million. The firm has identified 1,596 BTC stolen from around 7,300 addresses across three confirmed attack waves, plus 14 smaller incidents. The flaw involves recovery seeds generated on several Coinkite Coldcard models, including Mk3, Mk4, Mk5 and Coldcard Q. Investigators are still assessing a suspected fourth wave of thefts.