Investment
Features
FeesSafety
Academy
More
Pluang+

$38M stolen from Coldcard bitcoin wallets due to key generation flaw in firmware since 2021

Market News
31 Jul 2026
Coindesk
View Source
Bearish
$38M stolen from Coldcard bitcoin wallets due to key generation flaw in firmware since 2021

An attacker exploited a flaw in Coldcard hardware wallets' key generation, stealing about 594 BTC (worth $38 million) from around 500 wallets in under 30 minutes. The vulnerability, introduced in firmware version 4.0.0 in March 2021, caused the wallets to use predictable software-based keys instead of secure hardware randomness, making seeds guessable. Only wallets created on Mk3 devices with firmware 4.0.1 or later are affected, while newer models appear safe. The theft has had little impact on bitcoin's market price so far, and Coinkite has warned users to check their devices and firmware versions.

More News

Pump.fun retakes lead in 24-hour memecoin launchpad revenue, surpassing rival Pons.

Pump.fun retakes lead in 24-hour memecoin launchpad revenue, surpassing rival Pons.

Pump.fun, a Solana-based memecoin launchpad, has reclaimed the top spot in 24-hour protocol revenue with about $1.23 million in fees, overtaking Pons, a newer competitor that had briefly led earlier in 2026. Pons gained rapid traction by leveraging R...

Protocol Fundamentals
Bullish
4 hours ago
Boyaa Interactive buys 205 BTC for $14.3M, raising total holdings to 4,316 BTC for Web3 gaming projects.

Boyaa Interactive buys 205 BTC for $14.3M, raising total holdings to 4,316 BTC for Web3 gaming projects.

Boyaa Interactive purchased about 205 Bitcoin for $14.3 million between June and September 2026, increasing its total Bitcoin holdings to approximately 4,316 BTC at an average cost of $68,280 per Bitcoin. The company funded these purchases with cash ...

Protocol Fundamentals
Bullish
4 hours ago
USDT control lies with a 2-of-3 multisig owner on Tron, not individual wallets, affecting token security and control.

USDT control lies with a 2-of-3 multisig owner on Tron, not individual wallets, affecting token security and control.

USDT's control depends on the owner role of its smart contract, notably on Tron where a 2-of-3 multisig wallet controls over half of all USDT tokens. This owner role can blacklist addresses, create or destroy tokens, and pause transfers, but cannot a...

Market News
Neutral
4 hours ago
McKesson drives growth with oncology, strong cash flow, and share buybacks in US pharma market

McKesson drives growth with oncology, strong cash flow, and share buybacks in US pharma market

McKesson, a leading pharmaceutical distributor in the US oligopoly, generates over $5 billion in free cash flow and is expanding through its oncology segment, which saw a 31% revenue increase year-over-year. The company is strategically acquiring bus...

Analyst Insights
Bullish
4 hours ago
BDACS adopts LayerZero's cross-chain tech for KRW1 stablecoin to boost global use.

BDACS adopts LayerZero's cross-chain tech for KRW1 stablecoin to boost global use.

BDACS has integrated LayerZero's Omnichain Fungible Token (OFT) standard to enable seamless cross-chain transfers of its KRW1 stablecoin, backed 1:1 by Korean won held at Woori Bank. This upgrade unifies KRW1's supply across multiple blockchains, inc...

Protocol Fundamentals
Bullish
4 hours ago
banner-footerbanner-footer

Invest & Trade with
#1 Award-Winning Investment Super App