$38M in Bitcoin Drained by Coldcard Key Flaw Its Maker Thinks AI Found

Coinkite, the maker of Coldcard hardware wallets, reported that a build error caused seeds to be drawn from a software fallback instead of the hardware generator, leading to an estimated loss of 594 BTC (about $38 million) from roughly 500 wallets in 25 minutes. The company believes an attacker used AI to find the flaw in its open-source code, while its own AI review weeks earlier found nothing. Every current Coldcard model is affected to some degree, and updating firmware does not repair seeds already created.

In brief - Coinkite says a build error meant seeds on its Coldcard hardware wallets were drawn from a software fallback instead of the hardware generator. - It believes an attacker used AI on its open-source code, and says its own AI review weeks earlier found nothing. - Every current model is affected to some degree, and updating the firmware does not repair a seed already created. Coinkite believes an attacker used AI to find a flaw that has cost owners of its Coldcard hardware wallets tens of millions of dollars in Bitcoin /?post type=post&p=5736 , and says its own AI review of the same code weeks earlier turned up nothing. The hardware wallet manufacturer published an advisory https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/ for its Mk3 and a technical breakdown https://blog.coinkite.com/entropy-technical-backgrounder/ on Thursday, after learning that seeds generated by its devices were far more guessable than intended. The losses to the flaw, which was exploited early Friday, are estimated https://www.coindesk.com/tech/2026/07/31/major-bitcoin-wallet-flaw-drains-594-btc-in-25-minute-sweep at 594 BTC, around $38 million. Funds were drained from roughly 500 wallets inside 25 minutes, with 562 BTC since consolidated into a single address https://mempool.space/address/bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r . Coinkite said it has to assume "someone used AI to review previous versions of our firmware" in order to uncover the flaw. The firm said it had run one of the best available models over its own code a few weeks earlier, and the model "did not find this bug or anything serious." Attackers and defenders have the same tools, it wrote, but this time "it did not help us, and only helped the bad guys." What went wrong Coldcard's firmware calls a function to fetch randomness, and two implementations of it sat in the codebase with identical signatures: the hardware generator Coinkite wrote, and a software fallback inherited from MicroPython. A preprocessor guard checked only whether a setting was defined, without testing its value, so the build completed against the fallback without complaint. Seed generation had been drawing on it since a March 2021 migration. Every current model is affected to some degree. Coinkite estimates the effective search space for an Mk3 seed at about 40 bits, against the 128 a seed is meant to have. Extra entropy from the secure elements on the Mk4, Q and Mk5 lifts theirs to roughly 72 bits, which the company says materially improves the position without reaching the target. Tapsigner, Opendime and Satscard use different code and are unaffected. What owners must do Coinkite has shipped an emergency hotfix, version 5.6.0 for the Mk4 and Mk5 and 1.5.0Q for the Q. Updating does not repair a seed already created on affected firmware. Owners need a new seed generated on patched hardware, and the company recommends a strong BIP-39 passphrase, at least 99 dice rolls, or both. Mk3 owners, whose model is out of support, are pointed to a separate migration path. A seed created on an affected Coldcard stays weak after being restored to another brand's device, a point rival hardware wallet manufacturer Trezor made https://twitter.com/Trezor/status/2083089447768236535 while telling its own users their funds are safe. Block, which published an independent analysis https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware on Friday, said none of its products are affected, and its hardware lead Max Guise urged https://twitter.com/max guise/status/2083007180874379515 anyone exposed to move funds as soon as they safely can. Daily Debrief Newsletter Start every day with the top news stories right now, plus original features, a podcast, videos and more.