Coldcard Hardware Wallet PRNG Flaw Linked to $70M Bitcoin Theft

Mon, 03 Aug 2026 13:48:19 +0000

Engineer — Learn: A 2021 firmware error routed Coldcard seed generation to a deterministic software PRNG instead of a hardware source, enabling full wallet recovery at scale — a textbook cautionary example for any engineer implementing cryptographic key generation. If your organization holds BTC in Coldcard devices, treat this as Act and audit key provenance immediately.
SOC/IR — Skip
Leader — Learn: A $70M theft traced to a firmware-level entropy flaw in a widely trusted hardware security device illustrates that hardware vendor supply chain risk extends to firmware quality; useful context if your organization holds crypto assets or relies on hardware security modules, but unlikely to require immediate board action for most enterprises.

COLDCARD RNG flaw linked to $88M Bitcoin theft

Mon, 03 Aug 2026 13:48:19 +0000

Engineer — Learn: RNG flaws in embedded firmware serve as a cautionary case for any cryptographic key generation in custom hardware or firmware — review how your systems seed entropy, but this vulnerability is in consumer hardware wallets, not enterprise infrastructure.
SOC/IR — Skip
Leader — Skip