Jonathan Goodman did everything the Bitcoin community tells you to do. He never typed his seed phrase into a computer. He never stored it digitally. His Coldcard hardware wallet lived inside a safety deposit box, untouched, never connected to the internet, never shown to another person. On the morning of July 31, 2026, he checked his wallet and discovered 18.25 BTC — approximately C$1.6 million — had vanished overnight without a trace of phishing, malware, or human error.
“I never shared my seed phrase with anybody,” he wrote on social media, in a post that eventually drew 7.6 million views. “My devices never touched the internet.” What Goodman didn’t know — what none of the more than 5,200 affected users knew — was that a five-year-old build error in Coldcard’s firmware had quietly reduced the randomness of their wallet seeds from a theoretically unbreakable 128 bits to as little as 40 bits. Enough for an attacker with the right tools to guess the keys. Remotely. Without ever touching the device.
By the time the theft was fully documented, 1,816 Bitcoin — roughly $116 million — had been drained in four coordinated waves. It is the largest hardware wallet exploit in the history of cryptocurrency, and it arrives at the worst possible moment: in the middle of a year that is already shaping up to be one of the most devastating in the industry’s brief existence.
The Bug That Slept for Five Years
Coinkite, the Toronto-based company that makes Coldcard wallets, released firmware version 4.0.1 in March 2021. Buried inside the update was a build configuration error — a misset flag — that instructed the device to skip its dedicated hardware random number generator when creating wallet seeds. Instead, the firmware fell back to software-based entropy drawn from predictable sources: device serial numbers and clock registers.
The distinction matters enormously. A hardware random number generator draws from genuinely unpredictable physical processes — thermal noise, quantum fluctuations — that produce values no attacker can enumerate. Software entropy, especially when sourced from a device’s own serial number and internal clock, is far more structured. On the Coldcard Mk3 model, TRM Labs estimated the effective key space collapsed to approximately 40 bits — roughly 4 billion possible seeds. A determined attacker with modern compute resources could search that space without ever touching a device.
The flaw went undetected for over five years. Regular firmware updates and security audits did not catch it because the vulnerability existed at the build configuration level, not in the code logic itself. Coinkite CEO Rodolfo Novak, in a statement that drew heated responses, suggested that AI-assisted code review tools might now find latent bugs like this faster than human reviewers — a claim that security professionals largely rejected. “AI-assisted code review can now find latent bugs faster than seasoned experts,” Novak said. Vincent Bouzon, a cybersecurity expert at Ledger, countered that key generation “must be anchored in secure hardware, with architecture that cannot silently downgrade to untrusted software sources” — a structural failure that no retrospective AI review could have prevented after the fact.
Four Waves, 41 Minutes, $116 Million
The attackers moved with surgical precision. The first wave struck on July 30, 2026 at an unspecified hour, draining approximately 594 BTC from around 500 wallets in 25 minutes. Three additional waves followed over the next four days, each targeting a different cohort of affected addresses. The single largest sweep — 1,082 BTC cleared from 1,196 wallets — was completed in 41 minutes.
After each wave, the stolen funds pooled in attacker-controlled addresses with minimal onward movement. Blockchain analytics firm TRM Labs observed only “single-hop consolidation rather than layering or mixing,” suggesting the attackers may still be working out how to launder a sum large enough to attract significant attention. About 64.9 BTC was moved through Wasabi, a Bitcoin privacy protocol, and 200 ETH through Tornado Cash — exploratory amounts relative to the total haul. Attribution remains uncertain. Transaction construction differences between waves suggest multiple attackers may be involved, and the laundering pattern differs from the aggressive campaigns typically associated with state-sponsored groups like North Korea’s TraderTraitor unit.
For the victims, the identity of the perpetrators matters far less than the irreversibility of the outcome. The firmware patch that Coinkite issued does not retroactively protect wallets created on the vulnerable version. Any seed phrase generated between March 2021 and the patch date is, in the view of security researchers, permanently compromised — regardless of whether the device has since been updated. Coinkite is assisting affected users with police reports and insurance claims, but has not offered compensation.
The Broader Catastrophe: $1.3 Billion Lost and the Same Attacks Keep Working
The Coldcard hack did not happen in isolation. It is one data point in what is becoming the worst year for crypto security since records began. According to analysis by crypto.news and multiple blockchain security firms, DeFi protocols and crypto infrastructure lost a combined $1.3 billion to hacks in the first eight months of 2026 alone — across more than 30 individual incidents each exceeding $3 million.
What makes this year’s losses uniquely alarming is not the total figure but the pattern behind it. For the first time on record, compromised private keys and social engineering have overtaken smart contract code bugs as the primary attack vector. Protocols that passed independent security audits with flying colors lost hundreds of millions anyway — because the vulnerability wasn’t in the code.
The Drift Protocol breach in April illustrated this with brutal clarity. Attackers posed as legitimate traders, built relationships over months through industry conferences and professional meetings, then leveraged the trust they’d cultivated to obtain admin key authorization. The actual drain — $285 million — took 128 seconds. KelpDAO suffered a similar fate in April when an attacker compromised a LayerZero developer’s session credentials, poisoned the RPC infrastructure to forge cross-chain messages, and minted 116,500 unbacked tokens, triggering a $6.28 billion collapse in Aave’s total value locked. “A protocol can pass a flawless code audit and still lose millions because of a compromised admin key,” one security researcher told crypto.news.
Q3 2026: The Quarter That Broke Records
The third quarter of 2026 set a grim benchmark. According to data compiled by CryptoTicker, crypto hacks totalled $1.26 billion across 247 incidents between July and September — a 54% increase from Q2’s $819 million, despite incident counts rising by only 13%. The math tells the story clearly: attackers are getting better at picking their targets. Average losses per incident climbed from $3.7 million in Q2 to $5.1 million in Q3.
September alone accounted for between $766 million and $769 million in losses — the highest monthly figure of the year — driven largely by the Bitget exchange breach ($387.5 million, later confirmed to involve a third-party zero-day vulnerability in security appliances) and the Liquid Network exploit ($320 million, with approximately $285 million subsequently recovered). Year-to-date losses through Q3 are estimated at approximately $2.68 billion. If the final quarter maintains even half of September’s pace, 2026 will surpass 2022 — widely considered the prior record year — before December.
North Korea’s Lazarus Group continues to be the most destructive single actor in this landscape. Security analysts attribute at least 44% of 2026 losses — roughly $575 million — to the group’s TraderTraitor subunit, which has now accumulated more than $2 billion in stolen crypto over the past 18 months. The group’s hallmark is patience: infiltrating projects through months of social engineering before executing drains that take minutes.
Why the Old Defences No Longer Work
The conventional wisdom in crypto security — get a hardware wallet, never share your seed, use a reputable exchange — is not wrong. But 2026’s hack landscape has revealed how many gaps remain around those reasonable precautions.
Hardware wallets, long considered the gold standard for Bitcoin custody, now carry a caveat: they are only as secure as the entropy source used when the seed was generated. The Coldcard incident has prompted security researchers to flag similar concerns about other wallet manufacturers and historical firmware revisions. Andrew Lazutkin, CTO of Tangem, noted that the Coldcard breach demonstrates “why open-source firmware should not automatically be equated with better security” — a pointed observation given that Coldcard’s openness is often cited as a core selling point.
On the DeFi side, even impeccably audited smart contracts are proving irrelevant when the real attack surface is the humans and credentials that govern protocol administration. Despite known mitigations — multi-party computation for threshold signing, timelock delays on admin actions, multi-verifier bridge configurations — adoption has been remarkably slow. Researchers cited in the crypto.news analysis found that 47% of LayerZero applications still use single-verifier bridge configurations, months after the KelpDAO exploit demonstrated exactly how that can be weaponised.
Guy Swann, a prominent Bitcoin commentator, put it plainly in the aftermath of the Coldcard theft: “This is the worst hit in bitcoin history to properly secured bitcoiners.” Simon Gerovich, CEO of Metaplanet, framed the systemic lesson: “Even careful people doing everything right can be exposed by flaws they had no way to see.”
What This Means for You
If you use a Coldcard wallet, the first and most urgent step is to check when your seed phrase was generated. If you created your wallet between March 2021 and the date of Coinkite’s security patch, treat your wallet as potentially compromised regardless of whether you have updated the firmware since. Security researchers recommend the following steps:
- Generate a new seed phrase on updated hardware, preferably using 50 or more dice rolls to introduce genuine physical entropy that bypasses any software vulnerability.
- Verify the new wallet by checking the fingerprint and confirming a receive address before transferring any funds.
- Move funds incrementally, starting with a small test transaction, before transferring your full balance.
- Consider a multisignature setup combining two or more independent hardware wallet devices from different manufacturers, so that no single firmware flaw can create a single point of failure.
For anyone holding significant crypto — whether in hardware wallets or DeFi protocols — 2026’s loss figures argue for a hard look at where the real custody risks lie. Hardware wallets remain a better choice than custodial exchanges for most self-custody purposes, but the Coldcard hack has demonstrated that “better” is not the same as “invulnerable.” Nick Neuman, CEO of Casa, a multisig custody firm, was direct about the limits of single-device self-custody: you “just can’t ask people to roll dice to be secure.”
Jonathan Goodman did everything right. His Coldcard wallet never touched the internet. His seed phrase never left a safety deposit box. And on the morning of July 31, 2026, it wasn’t enough — because the vulnerability wasn’t in anything he did. It was in a line of build configuration committed to firmware code in 2021 and left dormant for five years. In crypto’s ongoing war between security researchers and attackers, that is the most uncomfortable lesson of this year so far: the threats you can see and guard against are not always the threats that find you.
Sources:
TRM Labs — The Largest Hardware Wallet Exploit of 2026: Inside the $116 Million Coldcard Hack
Forbes — ‘I Did Everything Right’: AI Warning After $116 Million Bitcoin Hack
Crypto.news — DeFi Has Lost $1.3 Billion to Hacks in 2026 and the Same Attack Keeps Working
CryptoTicker — Crypto Hacks: $1.26 Billion in the Third Quarter
Blockonomi — Q3 2026 Crypto Breaches Total $1.26 Billion With Bitget Hack Dominating Quarter
The Hacker News — Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
