Loading article…
Coldcard wallets were hit by a 25‑minute sweep that stole $30 million from 500 wallets, exposing firmware seed vulnerabilities.
A attacker siphoned roughly $30 million from Coldcard hardware wallets in the first 10 minutes of a 25‑minute sweep that hit 500 wallets, highlighting lingering seed‑generation flaws in the device’s firmware [2].
| At a glance | |
|---|---|
| Amount stolen (first 10 min) | $30 million |
| Total sweep value | $38 million+ |
| Wallets affected | 500 |
| Primary catalyst | Targeted large‑balance Coldcard wallets |
Chainalysis reported that the perpetrator prioritized the largest Coldcard wallets, extracting $30 million within ten minutes before expanding to smaller balances. Three of the ten biggest victim wallets each held at least 10 BTC (≈ $636 k per wallet at the time) [2]. The operation continued for about 25 minutes, ultimately draining 500 distinct wallets and pushing the total value taken past $38 million. The pattern suggests the attacker pre‑mapped the wallet population to maximize early gains rather than proceeding randomly.
The breach exploited seeds generated on vulnerable firmware, a risk that persists even after applying the hotfix released by Coldcard. Bitkey’s engineering lead, Clay Garrett, noted that the attacker used a paid account with a major blockchain‑services provider to query source addresses, enabling the precise targeting of high‑balance wallets [2]. Although the provider supplied standard services, the specificity of the requests helped investigators trace the operation, underscoring the importance of securing both hardware and the ancillary services used for address look‑ups.
The incident demonstrates that even “offline” cold storage can be compromised through firmware weaknesses and external query services, raising questions about the long‑term resilience of hardware wallets without rigorous seed‑generation safeguards.
Coverage is mostly measured — 286 of 300 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 2 outlets · Aug 1, 2026 · How we report
The CLARITY Act is scheduled for a Senate cloture vote at 2:15 p.m. ET on 15 September 2026. The legislation, which includes provisions for non-decentralized DeFi protocols, requires 60 votes to advance past the debate stage.
Bitcoin open interest dropped by 13.5% as of 15 September 2026 because traders proactively cut leverage to manage risks associated with the upcoming CLARITY Act vote and Federal Reserve rate decision. This reduction in derivatives exposure occurred before the events took place rather than as a result of forced liquidations.
Market analysts are divided on the immediate price direction for Bitcoin, with some technical indicators flagging a negative outlook if the price breaks below $76,500. While the long-term weekly trend remains constructive, the market is currently structured to absorb the outcome of the Federal Reserve decision rather than predict a specific price movement.
Bitcoin is up 22.2% over the 30-day period leading up to 15 September 2026. This performance follows a rally that saw the price move from approximately $63,000 to $81,700 during August.