Coldcard Implements Major Security Upgrades After Roughly $130 Million Bitcoin Seed-Generation Exploit Exposed Wallets
Table of Contents
You might want to know
• How did a seed-generation flaw reduce Coldcard wallet entropy enough to enable widespread thefts?
• What concrete steps has Coinkite taken to prevent similar incidents going forward?
Main Topic
Coinkite, the maker of the Coldcard hardware Bitcoin wallet, deployed a significant firmware update after a vulnerability in its seed generation process was exploited to steal a large quantity of Bitcoin. The flaw, present in versions of firmware dating back to 2021, produced some wallet seeds with insufficient randomness. That reduction in entropy made it possible for attackers to more easily derive private keys and drain funds from affected wallets. Over several weeks of observed activity, the exploitation of this weakness led to approximately $130 million in stolen Bitcoin.
The company released updated firmware builds — specifically firmware 5.6.1 for Mk4 and Mk5 units and 1.5.1Q for Q-series devices — following an intensive, multi-week review that included external security researchers and AI-assisted auditing tools. Coinkite described this collaborative review as important to stress-testing the fixes and confirming edge-case behavior. The update addresses the root cause in seed generation and implements multiple additional protections across transaction signing, USB handling, backups, and internal randomness sources.
Reported attacks began in July when bad actors successfully drained funds from air-gapped Coldcard devices. In the first widely reported incident, around 594 BTC (approximately $38 million at the time) was stolen from roughly 500 wallets in about 25 minutes. Tracking conducted by outside groups, such as Galaxy Research, documented thousands of affected addresses and tens of millions in losses across multiple attack waves. By mid-August, researchers had attributed roughly 1,778 BTC (around $112 million at that period's market price) to the incident, and later totals brought the estimated cumulative thefts close to the $130 million mark.
Technical analysis indicated that, on some impacted devices, the entropy available to seed generation fell from an expected security level of 128 bits down to about 40 bits. That magnitude of reduction dramatically increases the feasibility of brute-force or search-based attacks against wallet seeds, especially when combined with programmatic techniques. Coinkite noted the possibility that attackers used AI to analyze historical versions of the device's open-source firmware to discover subtle defects — an observation aligned with broader concerns about AI accelerating vulnerability discovery.
To remediate the vulnerability and harden the platform, Coinkite implemented several key changes. First, the Coldcard now requires that users supply an explicit amount of external randomness when generating a new seed: at least 65 physical key presses, 50 dice rolls, or 128 coin flips. The device combines that user-provided entropy with its own hardware randomness to create the final seed. The firmware also replaces the previous Yasmarang backup pseudo-random number generator with a SHA-256 Hash_DRBG implementation, and it adds explicit checks to detect and fail when the hardware random number generator appears to malfunction.
Beyond seed generation, the firmware improves transaction handling. Coldcard now performs a final verification of any partially signed Bitcoin transaction (PSBT) immediately before signing. This change addresses a theoretical attack vector in which a compromised host computer could alter a transaction after a user has visually inspected it but before the wallet completed the signature. If a PSBT changes between review and signing, the device halts the signing flow and warns the user. Coinkite described this as a preventative measure; it did not report confirmed instances of the specific PSBT manipulation being exploited in the wild.
Other protections in the release include stricter USB data access controls, hardening of the device's Delta Mode (a feature used for secure signing and operations), and improved handling and validation for wallet backups. The company also emphasized that users who created seeds with affected firmware versions from 2021 through July 2026 must generate new seeds using the updated firmware and migrate their funds to new wallets to ensure protection.
The incident has sparked broader discussion about how central entropy quality is to the security model of hardware wallets. Experts reiterated that cryptographic systems are only as strong as their randomness sources and that subtle implementation errors can have major financial consequences. Some analysts and vendor representatives also raised the role of AI — not only as a tool to help auditors find and fix bugs more quickly, but also as a potential accelerant for attackers who can use machine learning to analyze open-source code and discover flaws at scale.
Coinkite said the investigation into the thefts is ongoing and that law enforcement agencies are involved. The company pledged to assist authorities and to support affected customers as they migrate funds to new seeds. Meanwhile, the security community has used the incident as a reminder to adopt layered defenses: diversify wallet storage, move funds after suspicious firmware exposure, and require strong, verifiable randomness combined with robust validation and auditing of cryptographic code.
In sum, the Coldcard exploit showcased how an implementation-level weakness in entropy generation can be exploited at scale, how AI tools are influencing modern vulnerability discovery, and how coordinated, transparent remediation — including open review and concrete changes to randomness handling — can mitigate further damage. For Coldcard users and the broader hardware-wallet ecosystem, the incident underscores the need for vigilant, ongoing audit practices and clear migration paths when critical firmware issues are discovered.
Key Insights Table
| Aspect | Description |
|---|---|
| Scale of Theft | Approximately $130 million in Bitcoin reportedly stolen across many addresses and attack waves. |
| Root Cause | A seed-generation flaw reduced entropy on some devices, lowering security from ~128 bits to ~40 bits in affected cases. |
| Firmware Fixes | New firmware (5.6.1 / 1.5.1Q) adds external randomness requirements, replaces Yasmarang with SHA-256 Hash_DRBG, and adds RNG failure checks. |
| Transaction Safety | Coldcard now verifies PSBTs immediately before signing and warns if the transaction has changed. |
| Migration Advice | Users who generated seeds on affected versions (2021–July 2026) should create new seeds with updated firmware and move funds. |
Afterwards...
Looking forward, the Coldcard incident is likely to push hardware-wallet vendors to strengthen entropy validation, adopt more conservative randomness standards, and expand third-party and automated auditing. Users will increasingly expect transparent disclosure and clear migration instructions when critical vulnerabilities are discovered. At the same time, the event highlights a growing dynamic in which AI and automated tools accelerate both vulnerability discovery and remediation — making fast, collaborative responses essential. Law enforcement investigations and industry lessons learned should inform future firmware design, operational practices, and community education to reduce the likelihood of similar large-scale losses.
