{"id":48938,"date":"2026-08-01T00:06:15","date_gmt":"2026-08-01T00:06:15","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=48938"},"modified":"2026-08-01T00:06:15","modified_gmt":"2026-08-01T00:06:15","slug":"galaxy-digital-says-70000000-drained-from-bitcoin-holders-in-coldcard-wallet-exploit","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=48938","title":{"rendered":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit"},"content":{"rendered":"

\"\"<\/p>\n

Researchers at Galaxy Digital say about $70 million has been stolen due to an exploit in the popular Bitcoin wallet Coldcard.<\/p>\n

The attack<\/a> was enabled by a firmware bug that dramatically reduced the randomness of how the wallet creates its secret recovery phrase.<\/p>\n

According to Galaxy, the vast majority<\/a> of the funds were stolen in less than an hour.<\/p>\n

\u201cWhile new attacks are likely to occur if users do not migrate their funds out of affected Coldcard-generated addresses, the initial attack is identifiable onchain. Note that this analysis may not be complete, but it represents our best-efforts attempt at scoping the initial impact\u2026<\/em><\/p>\n

The full event spans six blocks and 41 minutes. Three intervening blocks contain no sweep activity at all, suggesting the transactions were broadcast in batches rather than streamed\u2026<\/em><\/p>\n

The loss profile is dominated by sub-1 BTC addresses in count, but by 1-50 BTC addresses in value. This is the shape of individual self-custody, not institutional or exchange holdings.\u201d<\/em><\/p>\n

Coinkite, the company behind Coldcard, says it takes full accountability for the firmware bug and has apologized to affected users.<\/p>\n

The company has released emergency firmware updates for all affected<\/a> models: version 4.2.0 or later for Mk3, 5.6.0 or later for Mk4 and Mk5, and 1.5.0Q or later for the Coldcard Q.<\/p>\n

These updates remove the vulnerable software fallback path and ensure new seeds use the intended hardware true random number generator.<\/p>\n

Critically, a firmware update alone does not secure existing seeds. Users must generate an entirely new recovery phrase on the fixed firmware and migrate their BTC.<\/p>\n

Follow us on X<\/a>, Facebook<\/a> and Telegram<\/a><\/span><\/em>
\n
\nDon’t Miss a Beat \u2013 Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em>
\n<\/p>\n

\n
<\/div>\n

&nbsp<\/p>\n

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n

Featured Image: Shutterstock\/80\u2019s Child<\/em><\/span><\/p>\n

The post Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit<\/a> appeared first on The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

Researchers at Galaxy Digital say about $70 million has been stolen due to an exploit in the popular Bitcoin wallet Coldcard. The attack was enabled by a firmware bug that dramatically reduced the randomness of how the wallet creates its secret recovery phrase. According to Galaxy, the vast majority of the funds were stolen in […]<\/p>\n","protected":false},"author":1,"featured_media":48939,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[45],"tags":[],"class_list":["post-48938","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin"],"yoast_head":"\nGalaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=48938\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"Researchers at Galaxy Digital say about $70 million has been stolen due to an exploit in the popular Bitcoin wallet Coldcard. The attack was enabled by a firmware bug that dramatically reduced the randomness of how the wallet creates its secret recovery phrase. According to Galaxy, the vast majority of the funds were stolen in […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=48938\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-01T00:06:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2024\/03\/bitcoin-btc-breaks-high.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit\",\"datePublished\":\"2026-08-01T00:06:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938\"},\"wordCount\":397,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bitcoin-btc-breaks-high-AUOXp0.jpg\",\"articleSection\":[\"Bitcoin\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938\",\"name\":\"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bitcoin-btc-breaks-high-AUOXp0.jpg\",\"datePublished\":\"2026-08-01T00:06:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=48938\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bitcoin-btc-breaks-high-AUOXp0.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bitcoin-btc-breaks-high-AUOXp0.jpg\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=48938#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=48938","og_locale":"en_US","og_type":"article","og_title":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag","og_description":"Researchers at Galaxy Digital say about $70 million has been stolen due to an exploit in the popular Bitcoin wallet Coldcard. The attack was enabled by a firmware bug that dramatically reduced the randomness of how the wallet creates its secret recovery phrase. According to Galaxy, the vast majority of the funds were stolen in […]","og_url":"https:\/\/cryptomag.finance\/?p=48938","og_site_name":"Cryptomag","article_published_time":"2026-08-01T00:06:15+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2024\/03\/bitcoin-btc-breaks-high.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=48938#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=48938"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit","datePublished":"2026-08-01T00:06:15+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=48938"},"wordCount":397,"image":{"@id":"https:\/\/cryptomag.finance\/?p=48938#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bitcoin-btc-breaks-high-AUOXp0.jpg","articleSection":["Bitcoin"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=48938","url":"https:\/\/cryptomag.finance\/?p=48938","name":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=48938#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=48938#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bitcoin-btc-breaks-high-AUOXp0.jpg","datePublished":"2026-08-01T00:06:15+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=48938#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=48938"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=48938#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bitcoin-btc-breaks-high-AUOXp0.jpg","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bitcoin-btc-breaks-high-AUOXp0.jpg","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=48938#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/48938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=48938"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/48938\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/48939"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=48938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=48938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}