A vulnerability in one of Bitcoin's most trusted hardware wallets has exposed a structural weakness in self-custody that no amount of user caution could have prevented.

More than 1,000 bitcoin — worth approximately $70 million at current prices — were drained from 1,196 Coldcard wallets in a single 41-minute window on July 30, according to a forensic analysis published by Galaxy Research. The theft was nearly double the figure initially reported when the incident first surfaced.

What makes this exploit exceptional is not the dollar amount. It is the mechanism.

Seeds That Were Never Random

Hardware wallets derive their security from a single foundational assumption: the seed phrase generated at setup is truly unpredictable. Coldcard's firmware was supposed to draw randomness from a dedicated hardware generator built into the device. An internal build setting disabled that generator, and a supporting library checked only whether the setting existed — not whether it was actually enabled.

Key generation fell through to a software substitute seeded from the chip's serial number and clock registers. The serial number is fixed factory metadata. Clock values are timing state that an attacker can narrow down experimentally on a device of their own.

The result was catastrophic. On the Coldcard Mk4, Q, and Mk5 models, the range of possible seeds collapsed from an astronomically large number to roughly four billion. Four billion is trivial for a modern computer to enumerate.

An Attack That Requires No Victim

The attacker never needed access to the victim's device. The entire exploit unfolded offline, on the attacker's own hardware.

The process is straightforward in principle: generate a candidate seed, derive the Bitcoin addresses that seed would produce, and check those addresses against the public blockchain. If the addresses hold a balance, sweep the funds. If not, move to the next candidate.

Galaxy's analysis confirms this pattern. Of the 1,196 drained wallets, 1,183 used modern native SegWit addresses, seven used legacy formats, and six used an older standard still. Nobody targets a specific victim across three address formats simultaneously — that is the signature of systematic enumeration.

The proceeds currently sit across four addresses and have not moved. Early reporting captured only one address, which is why the initial loss estimate has grown.

No Way to Self-Diagnose

Perhaps the most unsettling aspect of the vulnerability is that affected users cannot determine whether they are exposed. There is no diagnostic tool that reveals whether a given seed was generated within the vulnerable entropy range.

Coinkite, the Canadian company behind Coldcard, has warned Mk3 owners and claims its newer devices are unaffected. However, Block's independent analysis places the Mk2, Mk4, Q, and Mk5 within the vulnerable scope as well. Anyone who generated a seed on affected firmware must assume the worst, with no way to verify otherwise.

A Trailing Footprint

The attacker did leave one trail. According to Block analyst Clay Garrett, the operator used a paid account at a blockchain data provider to query source addresses during the sweep. Internal logs from that provider reportedly match the suspected workflow with what Garrett described as "extraordinary specificity."

Whether that trail leads to attribution remains to be seen. For now, Galaxy Research has warned that further waves of theft are likely if affected wallet owners do not move their funds.

Implications for Self-Custody

The Coldcard exploit strikes at the core promise of hardware wallets: that keeping keys offline makes them unreachable. This attack demonstrated that if entropy generation is flawed, the key does not need to be reached — it can be guessed.

The incident is already prompting renewed debate about whether self-custody has become too complex for everyday users, and whether regulated ETFs and qualified custodians offer a more practical security model for the majority of Bitcoin holders.

That debate is unlikely to be resolved soon. But the technical lesson is clear: randomness is not a feature. It is the foundation, and when it fails, everything above it collapses.