The Block reports that losses from a Coldcard vulnerability have grown to $70 million, according to Galaxy Research. Nearly 1,200 addresses were drained of more than 1,000 BTC in the attack.
Hardware wallet trust is a core assumption for anyone building self-custody flows, so a supply-chain or firmware-level flaw in a respected cold storage device undercuts the 'move keys offline and you're safe' story. If you integrate or recommend specific signers, worth checking whether the vulnerability is a device compromise, a seed-generation weakness, or a tampered-unit issue, since the mitigation differs sharply. For your own custody guidance, this is a reminder to lean on multisig and verifiable provenance rather than a single trusted vendor.
The headline and summary above belong to The Block; the full story is theirs and lives on their site. Only the commentary is ours.
HTSApp