A firmware bug dating back to March 2021 let attackers reconstruct private keys on certain Coldcard hardware wallets. Since July 30, 2026, approximately 1,850 BTC has been drained from over 5,4400 wallets across four attack waves [1] [2]. And the attack is still ongoing.
If you own a Coldcard, this guide tells you what to check, how to use the RBF rescue window if you're still in time, and what to do if your funds are already gone.
Is my Coldcard affected?
Check your firmware version and when your seed was first generated. Mk3 devices on firmware 4.0.1–4.1.9 are confirmed at risk; Coinkite has also pushed precautionary patches for Mk4, Mk5, and Q. Updating firmware today does not fix a seed that was already created on vulnerable firmware.
My BTC transaction is unconfirmed in the mempool right now
You may still be able to save your funds using a Replace-By-Fee (RBF) rescue.
My funds are already confirmed as stolen
They are not recoverable through the device or seed. Move to damage control and prevention immediately (see below).
Should I move everything to an exchange or new wallet?
Yes, but only to a wallet whose seed was generated independently of the compromised device/firmware.
A silent 2021 coding error caused some Coldcard wallets to generate Bitcoin seeds using weak, predictable randomness instead of true hardware entropy. Attackers exploited this starting July 30, 2026, sweeping funds from thousands of wallets in coordinated waves. It is the largest documented theft from "cold storage" devices in Bitcoin's history.
Yana Mar, Head of B2B & Partnerships at ChangeNOW, explains why this case is especially sensitive to crypto users:
"What makes this such a significant story is that it involves a cold wallet, a device that's supposed to be the safest way to store crypto. It is the one typically chosen by users who prioritize security over convenience. On top of that, the attack has unfolded in multiple waves, which means the risk of the vulnerability being exploited again hasn't fully passed."
This is the single most time-sensitive part of this incident. During the most recent attack wave, researchers observed that some of the attacker's sweep transactions had Replace-By-Fee (RBF) signaling enabled, meaning they hadn't been confirmed yet and could still be outbid.
What does RBF mean? Bitcoin lets an unconfirmed transaction be replaced by a new one spending the same coins, as long as the new one pays a higher fee. Miners will generally include whichever version pays more. If the attacker's transaction is still unconfirmed, you can try to broadcast your own competing transaction with a higher fee and win the race.
Because the flaw is in the seed itself, you and the attacker both effectively "know" the same private key. That means you can spend from the address too, as long as you move before the attacker's transaction confirms.
Important: This only works before the attacker's transaction confirms on-chain. Once confirmed, the funds cannot be recovered through this method.
Disclaimer: In practice, attackers behind large-scale sweeps like this typically run automated bots that monitor the mempool and instantly rebroadcast with an even higher fee the moment they detect a competing transaction — so winning this race by hand is far from guaranteed, even if you move fast. This method also only applies if the attacker's transaction explicitly signals RBF in the first place; if it doesn't, this option isn't available to you.
Coinkit published official instructions on asset migration:
There is no way to reverse a confirmed Bitcoin transaction, and the coins cannot be "recovered" the way a hacked account password can be reset. That said, there are still concrete actions worth taking:
Coinkite (Coldcard's manufacturer) has released emergency firmware patches, destroyed remaining vulnerable inventory, halted shipments of affected units, and published a public security advisory.
On-chain researchers are monitoring known attacker-controlled addresses in real time and have referred hundreds of flagged addresses to law enforcement and industry compliance teams.
Exchanges and swap platforms typically run AML/blocklist screening against known attacker addresses as a matter of standard compliance practice. It can block or flag stolen funds if the attacker tries to cash them out.
On-chain data shows a surge in small BTC holders moving funds to centralized exchanges for perceived safety. It's the highest volume of small transfers since the FTX collapse in 2022.
The core lesson of this incident: controlling your own keys is not enough if the process that created those keys can't be independently verified.
"Going forward, I think users will become more cautious about which device they choose and will vet it far more carefully," – says Yana. "Coming back to the first point – a cold wallet still offers the highest level of security of any storage option available. The issue isn't the category itself, it's that not every cold wallet is secure enough."
A few concrete ways to protect your hardware wallet:
Multisig across different vendors. A 2-of-3 setup using hardware from different manufacturers means a single vendor's firmware bug can't drain your funds alone. An attacker would need to compromise multiple independent devices, not just one.
Use a BIP-39 passphrase. This acts as a "25th word" layered on top of your seed. Even with weak underlying entropy, a strong independent passphrase makes offline key reconstruction dramatically harder.
However, worth noting – it does not guarantee safety of your funds. What the community is saying: Bitcoin holders have been actively debating exactly this trade-off on Reddit since the exploit broke. A rough consensus is forming around "buys time, doesn't replace migration":
Verify entropy independently. Where supported, generate part of your seed from physical dice rolls rather than trusting the device's internal randomness alone.
Don't treat "generate once, forget forever" as safe. Periodically verify your setup with small test transactions, and don't assume a wallet is secure just because it's been untouched for years. That's exactly the profile of the wallets drained first in this attack.
Diversify custody. Don't keep all long-term savings in a single hardware wallet. Diversification – from assets you hold to places where you hold them – is everything.
Crypto Whales Impact: How Institutions Move the Market
When Bitcoin dips, social media starts to panic, and somewhere a fund is just quietly rebalancing a position. Here's how whales financial reality look, and why their bad day never feels like yours.
MoonPay or Transak? A 2026 Guide to Choosing the Right Crypto On-Ramp
Compare MoonPay and Transak on fees, speed, coverage, KYC, and payment options before choosing.
How Do Crypto Wallets Make Money in 2026: Main Revenue Flows
Building or scaling a crypto wallet? Analyze the key revenue models: from exchange APIs to staking, and discover what really drives revenue growth in today's market
