Coldcard Flaw Linked to About 1,816 Bitcoin (BTC) Moved From More Than 5,200 Addresses

About 1,816 Bitcoin (BTC) moved out of more than 5,200 addresses between July 30 and Aug. 4 in transfers linked to a Coldcard firmware flaw. The transfers were valued at about $116 million. Coinkite CEO Rodolfo Novak said a new AI model found a vulnerability that human reviewers had missed. The flaw affects firmware version 4.0.1 and later and can bypass the hardware random-number generator. Novak said there had been at least 15 reviews. Some Bitcoin developers disputed the finding. James O'Beirne said he privately raised a concern about Coldcard's random-number generation in May 2025. A firmware update can address the issue on new devices, but it cannot repair existing seed phrases. Users affected by the flaw need to generate new ones. Simon Yoon reports on blockchain technology for TokenPost.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to TokenPost.