Coldcard hardware wallet exploit led to $130M theft and prompted $15B in Bitcoin to move to safer custody.
Security & Exploits ·
A firmware exploit in Coldcard hardware wallets resulted in approximately $130 million in stolen Bitcoin across multiple attack waves starting July 30. Following the breach, 233,000 BTC worth roughly $15 billion moved out of long-term holder wallets as users including Ledger and Trezor owners shifted to multisig custody arrangements. Casa CEO Nick Neuman characterized the mass migration as evidence that distributed self-custody strengthens Bitcoin's resilience rather than weakening it, citing onchain data showing user movement toward safer storage exceeded stolen amounts by more than 100 times.