Coldcard Urges Fund Moves After $114M BTC Hack

Key Point

Coldcard said the security threat remains after a hack linked to a code flaw caused losses of about 1,816 BTC, or $114 million. Coldcard recommended that users install the security update, generate a new seed, and move their funds. Galaxy Research previously estimated that losses from the Coldcard incident could rise to as much as 2,055 BTC.

Why it matters: Active wallet-security risk can force users to move funds quickly and may reduce confidence in self-custody tools.

Market Sentiment

Bearish, Stress-on, Tech-driven, De-risking.

Reason: The remaining Coldcard security threat after a $114 million BTC hack supports a defensive market read.

Similar Past Cases

In the Ledger Connect Kit exploit on December 14, 2023, Ledger said malicious code affected versions 1.1.5, 1.1.6, and 1.1.7, and the exploit was effectively running for less than two hours before coordination helped neutralize it. (Ledger) The difference is that the Coldcard losses are far larger, and Coldcard says the threat remains in place.

Ripple Effect

The incident could spread through the custody-confidence channel if users treat hardware-wallet code risk as unresolved. If users delay the security update and seed migration, then loss exposure could remain concentrated in affected setups. If fund movement accelerates, then exchange and wallet monitoring activity could rise.

Opportunities & Risks

Opportunities: When Coldcard users complete the security update and seed migration, then lower exposed balances can reduce operational risk during the incident response. If Galaxy Research's upper estimate does not materialize, then confidence in containment could improve.

Risks: If additional losses move toward Galaxy Research's 2,055 BTC estimate, then avoiding new deposits to affected Coldcard setups is a defensive signal. If Coldcard says the threat remains in place after further updates, then reducing exposure to affected setups limits downside from continued compromise.