Bitcoin News
By Pankaj K
1 / 14
Coinkite's AI Review Missed What Attackers Found. Coinkite, the company that makes Coldcard, ran an AI-based review of its own firmware and didn't…
2 / 14
Self-Custody's Foundational Promise Under Pressure. Hardware wallets exist for one reason: to keep your Bitcoin safe without trusting a third party.
3 / 14
A trusted name in Bitcoin security just took a serious hit. Coldcard, the hardware wallet brand widely favored by self-custody advocates, is at the center of a breach that has…
4 / 14
The root cause goes back further than most people realize. A firmware update shipped in March 2021 quietly introduced a weak software fallback for generating wallet seeds.
5 / 14
Galaxy Research has tracked three distinct attack waves so far. They've flagged roughly 600 suspect addresses to federal investigators and warned that a fourth wave is probably…
6 / 14
Coinkite, the company that makes Coldcard, ran an AI-based review of its own firmware and didn't catch the vulnerability. The attackers apparently did.
7 / 14
Coinkite hasn't hidden from the problem. The company acknowledged the breach and the failure of its own AI review. No spin, at least publicly.
8 / 14
Galaxy has been clear that all vulnerable Coldcard devices remain at risk of being fully drained.
9 / 14
Related: Bitcoin Drops to $63,350 as Coldcard Exploit Wipes $88.6 Million Across 4,585 Wallets
10 / 14
The breach doesn't just hurt Coldcard's brand. It rattles something more fundamental. If a wallet that never connected to the internet can be drained because of a firmware flaw…
11 / 14
The crypto industry has spent years arguing that self-custody is safer than leaving funds on exchanges.
12 / 14
There's also a broader question here about AI's role in security — on both sides of the fight. Defenders are using it to audit code.
13 / 14
More context: Coldcard Firmware Flaw Puts 448.7 Bitcoin at Risk as Second Wave Hits 709 Wallets
14 / 14
For now, Galaxy Research is pushing affected users to move funds immediately if they haven't already.
The Currency Analytics
Want the full story?