A firmware vulnerability in older Coldcard hardware wallets was disclosed on July 30, 2026 by manufacturer Coinkite, reducing entropy during seed phrase generation to approximately 40 bits and potentially allowing attackers to reconstruct private keys. Between 1,367 and 1,816 BTC, worth approximately $89 million to $116 million, were drained from over 5,200 addresses. In response, spot Bitcoin ETFs recorded combined daily inflows of $620 million, while Bitcoin’s price experienced only a minor dip of approximately 3% before stabilizing.
Source: Read the original article
