Coldcard Incident Losses Climb to 1,359.882 BTC as Coinkite Pushes Emergency Firmware Patch

Coldcard users face mounting fallout from a security incident tied to Coinkite, with estimated losses now at about 1,359.882 BTC. Data from the Coldcard Sweep Watch dashboard indicates most of the identified bitcoin is concentrated in a small number of attacker-controlled addresses. On Aug. 1, one address associated with an attacker received an OP_RETURN message advertising services including a 10% fee to "wash" bitcoin, KYC assistance, and withdrawal support. Coinkite has released an urgent firmware update aimed at fixing a weak random number generation flaw believed to be at the root of the vulnerability. After installing the update, some users reported that Mk4, Q, and certain Mk3 devices became stuck on an error screen, failed to boot, or appeared bricked. Why it matters: Weaknesses in a custody device can force users to reassess seed safety and can weigh on confidence in affected wallet infrastructure. Market sentiment: Bearish, stress-on, tech-driven, de-risking. The reported loss of roughly 1,359.882 BTC is increasing custody-security pressure for users of the impacted hardware wallet. Context from past incidents: In the 2022 Slope wallet incident, an attacker drained 9,231 wallets for about $4.1 million in roughly four hours after private keys were leaked or compromised. The Solana Foundation advised affected users to create a new, unique seed phrase and move assets to a new wallet (Solana Foundation). The key distinction is that Slope involved a software wallet in the Solana ecosystem, while the Coldcard event centers on a hardware wallet and a significantly larger bitcoin-denominated loss. Potential ripple effects: The primary transmission channel is custody confidence. If seed generation is compromised, users may question the safety of older wallets. Should affected users migrate to fresh wallets following the firmware warning, on-chain consolidation patterns and exchange deposits could help indicate whether the risk is contained. If firmware problems persist, operational risk may expand from theft response to device recovery and user access. Opportunities and risks: - Opportunities: If Coinkite confirms the firmware is stable and users can verify new wallet generation, delaying added custody exposure until migration is complete may reduce operational risk. - Risks: If more Mk4, Q, or Mk3 devices remain stuck after updating, reducing reliance on impacted devices can limit custody risk until Coinkite delivers a verified fix.