Coldcard Wallet’s $130M Bitcoin Heist: The Entropy Bug Explained
A firmware flaw in Coldcard hardware wallets silently switched seed generation to a software PRNG, shrinking entropy from 128 bits to ~40. Attackers brute-forced keys, stealing over 1,596 BTC worth $130M. Coinkite traced the bug to a build guard error that went unnoticed for years.
Quick Take
Bug rerouted randomness from hardware RNG to a predictable software generator.
Older devices’ seed search space collapsed from 128 bits to just 40 bits.
Galaxy Research confirmed 1,596 BTC stolen; suspected total nears 2,055 BTC.
Coinkite’s fix revealed, but wallet generation was deterministic on older models.
Market Impact Analysis
NeutralHistorical exploit with limited current market impact; hardware wallet trust unaffected in broader market.
Speculation Analysis
Key Takeaways
- A firmware flaw rerouted Coldcard seed generation from a hardware RNG to a software pseudo-random generator, slashing entropy.
- The bug collapsed the seed search space from 128 bits to roughly 40 bits on Mk2 and Mk3 devices, enabling brute-force attacks.
- Over 1,596 BTC ($130M+) was stolen across multiple waves; Galaxy Research suspects the total nears 2,055 BTC.
- Coinkite’s fix revealed deterministic generation on older models, but the exploit window spanned years unnoticed.
What Happened
Coinkite’s Coldcard hardware wallets carried a critical firmware vulnerability that allowed attackers to brute-force private keys and drain over $130 million in Bitcoin. The issue, traced to a 2021 code migration, silently switched seed generation from the device’s hardware random number generator to a predictable software algorithm. Without any phishing or physical theft, at least 15 separate attackers reverse-engineered wallet seeds, sweeping funds in multiple waves. The largest single sweep moved $70 million in 41 minutes. Coinkite published a technical post-mortem on August 1, detailing how a build guard error went unnoticed for years, effectively turning “cold” wallets into deterministic traps.
The Numbers
Galaxy Research confirmed 1,596 BTC stolen across three waves, with a suspected fourth wave that would push the total to roughly 2,055 BTC—worth over $130 million. The bug reduced the effective search space for private keys from 128 bits to roughly 40 bits on Mk2 and Mk3 devices running firmware 4.0.1 through 4.1.9. More than 7,300 addresses were compromised. One coordinated sweep moved $70 million in under an hour. Coinkite identified at least 15 distinct attackers exploiting the flaw.
Why It Happened
The bug originated in a 2021 migration to libsecp256k1, the cryptographic library used by Bitcoin Core. A build guard—using #ifndef—checked whether a setting existed, not whether it was active. Coinkite had defined the setting as zero (“off”), but zero still counts as defined, so the guard passed. The firmware silently fell back to Yasmarang, a software pseudo-random number generator, instead of using Coldcard’s dedicated hardware RNG. Both functions had identical signatures, so the error evaded review. Because seed generation appeared deterministic only with prior knowledge of the PRNG state, users and auditors missed the collapse in entropy.
What to Watch Next
- Affected users must update firmware immediately, but old seeds remain vulnerable—new wallets should be created on patched devices.
- Watch for legal or regulatory repercussions as loss estimates climb; Coinkite’s transparency may set a precedent for industry disclosures.
- Monitor for similar entropy flaws in other hardware wallets, as the crypto community reevaluates random-number generation trust assumptions.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
