Security researchers and blockchain analysts have confirmed that a critical vulnerability affecting Coldcard Mk3 hardware wallets has resulted in approximately $70 million in Bitcoin losses. According to Galaxy Research, the exploit has systematically drained nearly 1,200 addresses of more than 1,000 BTC, with the total value of stolen assets estimated at roughly $70 million based on current cryptocurrency prices The Block.
The revelation of the vulnerability's scope has prompted urgent warnings from security experts across the cryptocurrency industry. Analysts are strongly advising all users currently holding Bitcoin on Coldcard devices to migrate their funds immediately to alternative secure storage solutions. The severity of the breach and the demonstrated ability of attackers to exploit the vulnerability have created an emergency situation requiring swift action from affected wallet owners Bitcoin Magazine.
Galaxy Research's detailed analysis reveals the breadth of the attack, documenting how approximately 1,200 distinct addresses fell victim to the coordinated draining operation. The theft of over 1,000 BTC represents a significant concentration of losses tied specifically to Coldcard hardware wallets, indicating a systemic security flaw rather than isolated incidents. These figures underscore the critical nature of the vulnerability and its widespread impact on users who relied on the device for secure cryptocurrency storage The Block.
Further investigation into the methodology behind the thefts suggests the perpetrator likely utilized services from a top blockchain services provider to facilitate the unauthorized transfers. This detail points to a sophisticated operation that leveraged established cryptocurrency infrastructure to move stolen funds, complicating efforts to trace and recover the assets. The use of such services indicates the attackers operated with a level of technical sophistication that enabled them to exploit the Coldcard vulnerability at scale Bitcoin Magazine.
The incident represents one of the most substantial hardware wallet security breaches documented in the cryptocurrency sector, specifically targeting the Coldcard Mk3 model. With confirmed losses approaching $70 million and affecting over a thousand individual addresses, the exploit has exposed critical security weaknesses that have put user funds at severe risk. As security teams continue monitoring for additional compromised addresses, the priority remains immediate fund migration for all Coldcard users to prevent further losses from the ongoing vulnerability The Block.