Coldcard: Over $130 Million in BTC Stolen in Active Exploit, Users Urged to Move Funds

Coldcard, a manufacturer of hardware wallets renowned for its security, is currently facing an active exploit being leveraged by attackers. According to initial reports, over $130 million in Bitcoin (BTC) may have already been stolen, with the amount continuing to rise. The company has issued an urgent alert urging its users to immediately move their funds to secure addresses, emphasizing the severity of the situation. This incident occurs at a time when hardware wallets are traditionally considered one of the safest solutions for storing digital assets, which could shake user confidence in these devices. What happened Attackers are reportedly exploiting a vulnerability in the transaction signing process, enabling unauthorized extraction of funds. Coldcard has not yet released precise technical details about the flaw, but reports suggest the exploit may have been active for several weeks. The company has advised users to stop using the affected wallet and transfer their assets to secure addresses. Additionally, the exchange OKX has reportedly frozen $26.3 million in suspicious transfers linked to the exploit, according to internal data cited by media outlets. No information has been disclosed about the identities of the attackers, their location, or their motives. Why this matters A security flaw in a hardware wallet like Coldcard’s can take many forms, but in this case, it appears tied to a transaction signing issue. Hardware wallets use offline-stored private keys to sign transactions. A flaw in this process could allow an attacker to forge valid signatures without access to the private key or redirect funds to addresses controlled by hackers. This type of exploit is particularly dangerous because it bypasses traditional security measures and may go undetected for weeks. On the market front, Coldcard users may liquidate their BTC positions as a precaution, creating temporary selling pressure. Confidence in cold storage solutions could also decline, shifting users toward hot storage or exchanges despite associated risks. Competing manufacturers, such as Ledger or Trezor, may benefit from an influx of new users. Regulators, meanwhile, could tighten security requirements for hardware wallets, particularly regarding penetration testing and independent audits. Finally, this incident could slow institutional adoption of cryptocurrencies, especially in sectors where security is a top priority. To watch Release of a detailed technical report by Coldcard, including an analysis of the flaw and security recommendations for users. Response from regulators (SEC, CFTC, or local authorities) and exchanges regarding the exploit, particularly in terms of listings and enhanced controls. Potential impact on Bitcoin prices within 48 to 72 hours, with close attention to key support levels ($60,000, $55,000). Corrective measures implemented by Coldcard to secure its wallets and restore user trust. Evolution of suspicious fund flows linked to the exploit, particularly through centralized exchanges.