Exploit Details and Scope

The Coldcard entropy collapse (July 30 – August 4, 2026) resulted in the theft of 1,367 to 1,816 BTC (approximately $89M–$116M USD) from over 4,585 addresses [Source: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/]. The incident was not a physical or network breach but a cryptographic entropy collapse caused by a firmware bug introduced in March 2021 that bypassed the device's Hardware True Random Number Generator (TRNG) [Source: https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware].

Exploit Details and Scope

The vulnerability stemmed from a single configuration error (MICROPY_HW_ENABLE_RNG=0) in firmware versions 4.0.1 through 4.1.9. This caused seed generation to fall back to a deterministic software-based pseudo-random number generator (PRNG), reducing security from 128-bit entropy to as low as ~40 bits for Mk3 devices and ~72 bits for Mk4/Mk5/Q models [Source: https://blog.coinkite.com/entropy-technical-backgrounder/].

The attack occurred in coordinated waves at approximately 27-hour intervals, targeting the largest balances first [Source: https://x.com/glxyresearch/status/2084411904924045370].

Reshaping Trust Assumptions

This incident has fundamentally dismantled the "set-and-forget" trust model for hardware wallets:

• Air-Gaps are not Panaceas: The hack proved that remote exploitation is possible via offline key reconstruction if the initial entropy is weak, even if the device never touches a network [Source: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/].
• Firmware Limits: Users learned that firmware updates do not secure existing seeds; they only prevent the generation of new weak seeds. Affected users must generate a new seed and migrate funds manually [Source: https://blog.coinkite.com/update-sunday/].
• The "Open Source" Fallacy: The bug persisted for five years despite the code being public, challenging the assumption that open-source hardware is inherently safer due to community audits.
• Software Overrides Hardware: A single line of software code successfully bypassed dedicated hardware security modules (TRNG), proving that the software layer remains a critical single point of failure.

Ecosystem and User Behavior Shifts

The broader hardware wallet ecosystem is shifting toward more defensive custody models:

• Multi-Vendor Multisig: There is a significant move toward using devices from different manufacturers (e.g., combining Coldcard with Ledger or Trezor) to ensure a single firmware bug cannot compromise a total quorum [Source: https://x.com/0xQuit/status/2084411904924045370].
• Mandatory User Entropy: Generating seeds via 50+ independent dice rolls has transitioned from an optional "power user" feature to a recommended baseline, as this was the primary method that protected Coldcard users from this specific exploit [Source: https://blog.coinkite.com/entropy-technical-backgrounder/].
• Passphrase Adoption: The use of a BIP-39 passphrase (25th word) is now viewed as essential insurance, as it adds independent entropy that remains secure even if the hardware-generated seed is compromised.
• Competitive Repositioning: Competitors like Ledger have capitalized on the event by highlighting their use of EAL6+ Secure Elements and different cryptographic libraries to differentiate their entropy generation from Coldcard's implementation.

Resolution and Current Status

Coinkite has released emergency patches for newer models (Mk4 v5.6.0+, Mk5 v5.6.0+, Q v1.5.0Q+), but the Coldcard Mk3 will not receive a firmware fix and is considered effectively retired [Source: https://blog.coinkite.com/update-sunday/]. Users with seeds generated on affected firmware after March 2021 are advised to migrate to new hardware and new seeds immediately. Approximately 90% of the stolen funds were reported to remain in the original attacker-controlled addresses shortly after the sweep [Note: not independently confirmed].