โ ๏ธ Cold Wallets Weren't So Cold: Coldcard Firmware Flaw Drains $116M in BTC
A 2021 firmware bug in Coldcard hardware wallets let hackers drain over 1,800 BTC (~$116M) from 5,200+ addresses โ without ever touching the physical devices. The flaw routed seed generation to a weak software RNG instead of hardware, so private keys could be reconstructed offline. Coinkite pushed emergency firmware on July 31; users who used dice-roll entropy or a BIP-39 passphrase were safe. Is your hardware wallet firmware up to date? Not financial advice.