Source says Coldcard wallet exposure extends beyond Mk3 after $38 million sweep

Coinkite's public advisory confirms an Mk3 seed flaw, but a source says the exposure is broader without identifying other affected devices.

By · Published · Updated

Why it matters

The suspected theft strikes at hardware wallets' core promise: users can follow the prescribed self-custody process and still lose funds if seed generation fails.

A miniature Coldcard Mk3 hardware wallet, appearing vulnerable and slightly ajar, with tiny digital circuit elements spilling or dislodged from within. (Museum miniature)

Rodolfo Novak (@nvk) and Peter Gray's Coinkite warned Coldcard Mk3 owners to move their bitcoin after identifying a seed-generation issue that may have exposed wallets created over a span of more than five years. But a source familiar with the incident told RuntimeWire the problem is "not just Mk3." The source did not identify other affected devices or specify whether the statement referred to the seed flaw, the wallets swept, or both.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.