Coldcard Hardware Wallet Firmware Bug Hack

A firmware vulnerability in Coinkite's Coldcard Mk3 devices caused seed generation to fall back to weak software, enabling attackers to systematically steal over $100-115 million in Bitcoin starting in July 2026. The incident has prompted discussions about security vulnerabilities in widely-trusted hardware wallets and the limitations of reputation-based security models.