Coinkite Urges Coldcard Users to Take Precautions After $70M Bitcoin Theft Tied to Weak Seed Generation

Coinkite is advising Coldcard users to take immediate precautions after a Bitcoin theft totaling about $70 million was linked to wallets created with weak seed generation. Researchers at Galaxy Research and engineers at Block estimate 1,082.65 BTC has vanished from affected wallets. The attacker began sweeping funds on Thursday, draining 1,196 Bitcoin addresses. The reported cause is insufficient entropy during private key creation, making keys more predictable than intended. The issue traces back to a firmware flaw in Coldcard Mk3 devices. Beginning with firmware version 4.0.1 released in March 2021, seed generation could fall back to a weak software pseudorandom number generator rather than the device's hardware true random number generator. Coinkite has not explicitly confirmed the theft is directly tied to Coldcard wallets. The company said Mk3 users were impacted and later advised Mk4, Mk5, and Coldcard Q users to take precautions as well. Why it matters: If seed generation fails, self-custody can turn into an outright theft vector when private keys become predictable. Market sentiment: Bearish; stress-on; tech-driven; de-risking. Traders say the reported $70 million drain from wallets with weak seed generation could undermine confidence in hardware wallet security. Comparable incident: In September 2022, Wintermute disclosed a loss of roughly $160 million after an attacker exploited a Profanity-related private key weakness. CEO Evgeny Gaevoy said the firm would continue on-chain trading (The Block). Unlike Wintermute's case involving a professional market maker, the Coldcard situation appears focused on end-user seed generation. Ripple effects: Weak seed generation can quickly broaden from direct theft exposure to wider custody caution, as users may rush to move funds off devices perceived as affected. Clearer firmware guidance from Coinkite and an end to ongoing drains would likely help stabilize confidence. Continued drains could keep the issue framed as an active security risk rather than a resolved bug. Opportunities and risks: - Opportunities: If Coinkite confirms a safe seed-generation process, migrating to properly generated seeds can reduce cold-storage operational risk. If users move funds without further losses, confidence in self-custody may recover faster. - Risks: If drains persist after guidance, cutting balances tied to affected Coldcard-generated wallets may be necessary to limit theft exposure. Delaying seed replacement leaves predictable private keys at risk.