Coldcard (Coinkite) exploit on 2026-07-30
Exploit on Bitcoin, 30 Jul 2026. Last verified 4 Nov 2026.
major
Reported loss
Not stated
no amount published
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Bitcoin
Summary
Coinkite disclosed on 2026-07-30 that a firmware build defect had made Coldcard hardware wallets generate seeds from a weak software random number generator since a migration in 2021. Attackers regenerated the affected private keys offline and stole funds, while the devices themselves were not hacked.
- Protocol
- Coldcard (Coinkite)
- Type
- Exploit
- Reported loss
- not stated
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | July 30, 2026 | coinkite.com ↗ |
| Cause | seed-generation RNG defect since the 2021 libNgU migration | coinkite.com ↗ |
| Attack | weak seeds exploited offline to regenerate private keys and steal funds | blog.coinkite.com ↗ |
Primary sources
- Coinkite: Coldcard security disclosure history ↗ official announcement · accessed 2026-11-04
- Coinkite: Coldcard security advisory ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram