coin-img-BTCBTC-3.40%coin-img-SOLSOL-2.87%coin-img-USDCUSDC+0.02%coin-img-XRPXRP-2.17%coin-img-UBOXUBOX-21.52%coin-img-HYPEHYPE-5.91%coin-img-ULTIMAULTIMA+4.49%coin-img-ETHETH-3.17%coin-img-BTCBTC-3.40%coin-img-SOLSOL-2.87%coin-img-USDCUSDC+0.02%coin-img-XRPXRP-2.17%coin-img-UBOXUBOX-21.52%coin-img-HYPEHYPE-5.91%coin-img-ULTIMAULTIMA+4.49%coin-img-ETHETH-3.17%coin-img-BTCBTC-3.40%coin-img-SOLSOL-2.87%coin-img-USDCUSDC+0.02%coin-img-XRPXRP-2.17%coin-img-UBOXUBOX-21.52%coin-img-HYPEHYPE-5.91%coin-img-ULTIMAULTIMA+4.49%coin-img-ETHETH-3.17%coin-img-BTCBTC-3.40%coin-img-SOLSOL-2.87%coin-img-USDCUSDC+0.02%coin-img-XRPXRP-2.17%coin-img-UBOXUBOX-21.52%coin-img-HYPEHYPE-5.91%coin-img-ULTIMAULTIMA+4.49%coin-img-ETHETH-3.17%

Coldcard Firmware Flaw Tied to Movement of 1,000+ BTC, Roughly $70M

AI Market Summary
Galaxy Research flagged movements of over 1,000 BTC (~$70M) potentially linked to a firmware vulnerability in Coldcard seed phrase generation, with Coinkite issuing expanded risk alerts and emergency updates across multiple models. The incident is negative for Bitcoin's self-custody narrative, elevating operational and counterparty-style risk for hardware wallet users. In the near term, it can raise security-driven selling and increase scrutiny of wallet vendors and supply chains.
Impact level
● Medium
Affected assets
BTC/USDT-3.40%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
Galaxy Research said Friday that more than 1,000 BTC from nearly 1,200 addresses has been moved, worth about $70 million, in transactions it believes are linked to a vulnerability affecting Coldcard hardware wallets. Coinkite issued an alert Thursday about an ongoing problem involving seed phrases generated by Coldcard Mk3 devices. The company said users who created seed phrases on Mk3 units running firmware version 4.0.1—released in March 2021—or later may have funds at risk. Coinkite later broadened the warning to certain firmware versions across Mk4, Mk5, and Coldcard Q, and pushed emergency firmware updates for all impacted models. Coinkite CEO Rodolfo Novak, known as NVK, apologized Friday and said the firm takes full responsibility for the firmware vulnerability. Why it matters: Firmware flaws that affect seed generation can undermine confidence in self-custody by creating a direct pathway to loss. Market sentiment: Bearish; stress-on; event-driven; fear. The reported movement of more than 1,000 BTC tied to a Coldcard issue raises immediate custody-risk concerns for Bitcoin holders. Similar past case: In June 2023, Atomic Wallet users lost more than $35 million in crypto following a major compromise, pushing sentiment toward security audits and fund-tracking efforts (Fortune). Atomic Wallet centered on a software wallet service, while this incident focuses on hardware-wallet firmware and seed phrase generation. Ripple effect: If seed generation is weakened, self-custody can become a correlated loss channel for users who relied on the same firmware. Additional affected firmware versions or further linked BTC movements could trigger broader risk repricing across the hardware-wallet market. Opportunities and risks: - Opportunities: If emergency firmware updates slow or stop additional linked movements, the incident may remain contained and users can focus on confirmed guidance for affected devices. - Risks: If Coinkite expands the scope again, reducing exposure to affected wallets and moving funds to verified safe storage could help limit operational risk.
Selected
BTC
BTC-3.25%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.

Risk Warning

Cryptocurrencies and their derivatives are innovative financial products with great volatility and high investment risks.

Although BingX is committed to providing users with easy-to-use trading tools, trading itself is still a highly sophisticated field. Trading digital assets and their derivatives are subject to high market risk and price volatility and may result in partial or total loss of account funds. You must carefully consider and exercise clear judgment to evaluate your financial situation and the aforementioned risks before using BingX Services. You shall be responsible for all losses arising therefrom. If necessary, please consult relevant professionals to make informed decisions before investing. By accessing, downloading, using or clicking on "I agree" to accept any BingX Services provided by BingX, you agree that you have read, understood and accepted all of the terms and conditions stipulated in BingX Terms of Use as well as our Privacy Policy.


Trading by copying or replicating the trades of other traders involves a high level of risks, even when copying or replicating the top-performing traders. Past performance of a BingX community member is not a reliable indicator of his future performance. Content on BingX's trading platform is generated by members of its community and does not contain advice or recommendations by or on behalf of BingX.