Coldcard Hack Losses Exceed $114M as Bitcoin Wallet Drains Continue
The Coldcard hardware wallet breach has resulted in cumulative losses exceeding $114 million as affected users report ongoing Bitcoin drains from their wallets. The incident represents one of the largest hardware wallet security failures on record.
Key Takeaways
- 1## Scope of the Breach Expands Bitcoin losses tied to the Coldcard hardware wallet compromise have now exceeded $114 million, according to tracking by Bitcoin Magazine.
- 2Users continue to report unauthorized withdrawals from wallets secured by the device, indicating the breach remains active or that attackers retain access to affected private key material.
- 3## What Is Known About the Attack Coldcard manufactures one of the most widely used hardware wallets in the Bitcoin ecosystem.
- 4The specifics of how the initial compromise occurred—whether through a supply-chain intercept, firmware vulnerability, or targeted exploitation—have not been publicly confirmed by the company.
- 5The rising total suggests either a large number of affected devices or significant per-wallet losses across a smaller group.
Scope of the Breach Expands
Bitcoin losses tied to the Coldcard hardware wallet compromise have now exceeded $114 million, according to tracking by Bitcoin Magazine. Users continue to report unauthorized withdrawals from wallets secured by the device, indicating the breach remains active or that attackers retain access to affected private key material.
What Is Known About the Attack
Coldcard manufactures one of the most widely used hardware wallets in the Bitcoin ecosystem. The specifics of how the initial compromise occurred—whether through a supply-chain intercept, firmware vulnerability, or targeted exploitation—have not been publicly confirmed by the company. The rising total suggests either a large number of affected devices or significant per-wallet losses across a smaller group.
Why It Matters
For Traders
Users holding Bitcoin on any potentially affected Coldcard device should assume private key compromise and transfer funds to a freshly generated address on a device not previously used with Coldcard.
For Investors
A $114M breach of a market-leading hardware wallet signals systemic risk in consumer custody solutions and may accelerate institutional adoption of cold storage alternatives and multi-signature setups.
For Builders
Wallet developers should audit their key derivation and export mechanisms; hardware manufacturers should publish detailed incident postmortems to inform security standards across the industry.
