Coldcard Hardware Wallet Compromised; Bitcoin Theft Exceeds $111 Million

Scope of the Breach

Bitcoin Magazine reports that confirmed theft from compromised Coldcard wallets has reached $111 million, though the full extent remains uncertain. Affected users report a median loss of 1 BTC per compromised wallet, indicating the breach affected a substantial number of accounts. Security researchers estimate the total loss could exceed $130 million when accounting for unreported incidents and delayed discovery of unauthorized access.

Coldcard's Role and Status

Coldcard, a hardware wallet manufacturer, has not yet issued a public statement detailing the nature of the compromise or the timeline of discovery. The breach raises questions about how private keys stored on the device were accessed, as hardware wallets are designed to isolate keys from internet-connected systems. The exact attack vector—whether supply-chain compromise, firmware vulnerability, or user-facing social engineering—remains unclear from available reports.

Incident Response and Next Steps

Users affected by the compromise are advised to transfer remaining holdings to new wallets immediately. Security firms and blockchain forensics teams are currently tracking stolen funds across the Bitcoin network. Bitcoin Magazine notes that this represents one of the largest losses tied to a single hardware wallet manufacturer.

Why It Matters

For Traders

Liquidation of stolen BTC on exchanges could exert downward price pressure over coming weeks if attackers begin converting to fiat or stablecoins.

For Investors

A major hardware wallet compromise undermines the security narrative around self-custody and may drive retail capital back to exchange custody temporarily.

For Builders

This incident highlights the attack surface on consumer hardware and may accelerate demand for multisig setups and airgapped signing devices with stricter key isolation.