Coldcard Firmware Flaw Hackers Steal $89 Million in Bitcoin from Thousands of Wallets

A five-year vulnerability in Coldcard has exposed a critical flaw in hardware wallet auditing processes, according to Kraken's security chief Nick Percoco. The bug escaped detection because auditors only verified the existence of the random number generator, not that it was being used in the seed generation process, representing a significant risk to cryptocurrency users.

Percoco has labeled the incident a "wake-up call" for hardware wallet manufacturers, calling for independent testing to verify that the approved source of randomness is actually being used by production firmware. Consumers are asked to trust a manufacturer's implementation of the single most critical function in the system with no independent verification that the approved entropy path is the one actually executing, highlighting the urgent need for greater transparency and security in the cryptocurrency ecosystem.

Bitcoin investor and entrepreneur Anthony Pompliano addressed the Coldcard security incident on August 2, clearly separating the security failure from Bitcoin's protocol itself. As verified losses exceeded $86 million, Pompliano directly challenges the 'Bitcoin was hacked' narrative, providing a precise technical analysis of what actually occurred.

This warning arrives amid bearish market sentiment, when technical incidents can quickly amplify fear, misinformation, and internal conflict. Pompliano's analysis serves as an antidote to market panic in the cryptocurrency space, reinforcing the robustness of Bitcoin's protocol even in the face of third-party storage solution failures.

The United States and Japan have jointly intervened to support the yen, marking the first coordinated action of its kind in 15 years. This unprecedented move signals heightened concerns about global financial instability and demonstrates that central banks are prepared to take coordinated action to prevent significant currency market disruptions. For the cryptocurrency market, this intervention could trigger substantial volatility, affecting both digital assets and broader risk markets. Bitcoin and crypto traders should closely monitor yen movements and market reactions, as events of this magnitude can reshape capital flow dynamics and dramatically alter investor sentiment toward risk assets.

A fourth wave of coordinated attacks is sweeping Coldcard hardware wallets, stealing a massive 389 BTC. Alex Thorn, Head of Research at Galaxy, has identified 218 transactions impacting 462 potential victim addresses in just hours, with an activity rate 45 times higher than normal. Coldcard users are receiving an urgent alert about this growing threat to the Bitcoin ecosystem.

The attackers are employing a sophisticated tactic, creating fresh destinations for each victim rather than consolidating funds into a central wallet. This strategy complicates tracking and recovery of stolen assets. Thorn highlighted that unconfirmed transactions may provide a narrow window for some Coldcard users to save their funds, emphasizing the need for immediate vigilance and enhanced security measures.

A new Senate Banking Committee minority staff analysis renews Democratic objections that the CLARITY Act preserves pathways for President Donald Trump to profit from crypto ventures after financial disclosures showed about $1.4 billion in 2025 crypto earnings. The latest findings could further complicate the bill's prospects before a Senate vote, creating significant hurdles for cryptocurrency regulation in the United States.

The minority analysis represents a critical challenge to the CLARITY Act, which aims to establish clear guidelines for the cryptocurrency industry. With Democrats highlighting potential conflicts of interest involving the president, the legislation faces substantial obstacles in Congress. The ongoing debate about financial transparency and ethics in the crypto sector continues to intensify, with investors and regulators closely monitoring the implications of this high-profile case.

ZeroStack is facing an existential crisis after its crypto portfolio valued at $163 million plummeted to just $15 million. The company now depends entirely on 0G staking rewards to ensure liquidity and survival, in a desperate attempt to reverse a non-cash fair-value loss that has shaken its financial foundations. The company's survival strategy hinges on selling staking rewards, but management itself admits uncertainty whether these plans will be sufficient to alleviate substantial doubts about its future viability. This case serves as a severe warning about the inherent risks of extreme cryptocurrency market volatility and how a single value plunge can put even seemingly robust projects in existential jeopardy.