Coldcard Security Crisis: $38.5M Bitcoin Losses Prompt Urgent Firmware Update

Coldcard, a leading Bitcoin hardware wallet manufacturer, has officially acknowledged a critical vulnerability affecting its Mk4, Mk5, and Q models following reports of $38.5 million in Bitcoin losses potentially linked to their devices. The company initially claimed the issue was limited to Mk3 models but has now released urgent firmware updates for all affected devices, including the previously identified Mk3.

This security flaw generates insecure seeds, putting the funds of thousands of Coldcard wallet users at risk. The incident represents one of the most significant security breaches in the Bitcoin ecosystem, forcing the community to reconsider cryptocurrency storage practices. While Coldcard hasn't specified how many users were affected, the reported loss amount underscores the severity of the issue and the urgent need for device updates across the affected models.