A sophisticated cyberattack on Coldcard hardware wallets has exposed a critical vulnerability in the cryptocurrency industry's most trusted security infrastructure.
Hackers exploited a software flaw to siphon approximately $86 million in Bitcoin from more than 4,500 accounts, marking one of the largest breaches of offline storage devices to date.
The incident strikes at the core of the value proposition for hardware wallets, which are marketed as the safest way to hold digital assets by keeping private keys offline.
The scale of the breach—impacting thousands of individual holders—suggests a systemic issue rather than isolated user error, raising immediate questions about the integrity of other cold-storage solutions.
This security crisis arrives as Bitcoin faces severe macroeconomic headwinds.
The cryptocurrency has recently plunged to its lowest level in nearly two years, testing the resilience of spot Bitcoin exchange-traded funds (ETFs) that were expected to act as shock absorbers during market downturns.