Coldcard Ships Firmware After $114M Bitcoin Theft
The patch tightens the RNG and signing flow, but seeds from affected firmware between 2021 and July 2026 still need replacement. AI-assisted auditing is the broader industry signal here.
Every Zipp story tagged #SelfCustody, newest first.
The patch tightens the RNG and signing flow, but seeds from affected firmware between 2021 and July 2026 still need replacement. AI-assisted auditing is the broader industry signal here.
The $100M in physical theft is the headline; the 40,000-record breach is the structural warning. Hardware-wallet security now means controlling what sits behind the device, not just the device itself.
The bug sat in open-source code for five years while a community built on 'don't trust, verify' outsourced its judgment to one vendor's reputation, Foundation CEO Zach Herbert argues.
The week crystallised the gap between institutional pull-in and project-level weakness: a $1.8B Mastercard stablecoin deal and Fidelity's staking push landed while over 100 projects folded and a…
The breach is digital, but the downstream risk is physical: name-and-address leaks now translate directly into wrench-attack targeting for known crypto holders.
The wallet path points to internal custody reshuffling rather than distribution, while Bitcoin near $63,600 leaves Metaplanet with an estimated $1.4B unrealized loss.
Thin order books increase execution risk for holders, while unaudited Binance figures point to self-custody rather than compliant rivals as the main post-MiCA destination.
The rule, effective January 2027, covers stablecoins as well as cryptocurrencies and forces providers to hold even smaller transfers flagged by internal risk systems.
The crypto-law push makes private-key control, rather than exchange custody, the key adoption question for Russian users.
The figures put custody choices at the center of Bitcoin's adoption story, while sustained activity will determine how durable the signal is.
Russia's Sept. 1 crypto framework caps retail buying at 300,000 rubles and forces transactions through regulated depositories, so users are moving keys offline before the rules bite.
Brazil is putting anti-fraud controls ahead of faster settlement, bringing a new waiting period to larger flows involving foreign firms or self-custody wallets.
Bitcoin trades 50% below its all-time high while long-term holders redistribute, a setup that points to custody reshuffling after the Coldcard breach rather than the profit-taking that has…
The $114M drained from best-practice self-custody users is the strongest argument yet that holding your own keys still means trusting the silicon.
The 77,000 BTC moving isn't selling pressure; it's users fleeing a hardware-wallet bug. Every bearish on-chain reading this week is suspect, since the largest flow since FTX wasn't economic, it was…
The figure is roughly twice the early read on the incident and lands Coldcard inside a growing supply-chain risk tier no Bitcoin custodian can ignore.
Roughly $38M has been swept from single-sig seeds generated between 2021 and 2023, and the exploit is unpatchable by design: any firmware fix would tip off attackers to wallets still holding funds.
The seed-randomness flaw had lurked in firmware since March 2021 and went unnoticed for years, exposing the practical ceiling of single-device self-custody for serious BTC holders.
BTC is on track to close July up about 7.5% despite rate-hike fears, climbing yields and an AI-led equity unwind, with analysts pointing to a late-June leverage flush as the reason there was no…
Nearly 1,200 addresses and 1,000 BTC later, the incident has crossed from isolated phishing to a coordinated drain, putting self-custody users on notice about supply-chain risk in hardware wallets.