Coldcard Hardware Wallet Flaw Linked to $100M Bitcoin Theft

Reports indicate that a security flaw in the Coldcard hardware wallet, a popular device for storing Bitcoin offline, has been exploited by attackers to steal more than $100 million worth of BTC from thousands of addresses. Toronto entrepreneur Jonathan Goodman is among those confirmed to have lost funds in the incident.

Hardware wallets are widely regarded as one of the safest ways to store cryptocurrency because they keep private keys offline, away from internet-connected devices. A breach of this scale raises serious questions about the security assumptions many individuals and businesses make when relying on self-custody solutions, and highlights that even offline storage methods can be vulnerable to flaws in design or implementation.

While full technical details of the exploit have not yet been disclosed, the scale of losses suggests the vulnerability may have affected a broad range of users rather than a single targeted attack. Businesses holding cryptocurrency assets, whether for treasury purposes or client services, should treat this as a reminder that no storage method is entirely risk-free and that device firmware, supply chain integrity, and backup practices all matter.