Bitcoin Developers Find 5,000 Vulnerabilities After $100M Coldcard Exploit

Key Point

A volunteer group of Bitcoin developers is conducting a coordinated security audit across Bitcoin code bases. The group identified around 5,000 security vulnerabilities across almost 400 projects in 24 hours. The findings include 85 critical bugs and 635 high-severity bugs, most of which project owners have already verified. Calle said the audit uses Moonshot's Kimi K3 model at a compute cost of $10,000 per day. Coldcard urged users to migrate funds after the exploit drained almost 2,000 bitcoin worth just over $100 million from more than 5,200 addresses.

Why it matters: Large verified vulnerability counts may reduce confidence in self-custody tools and could push users to demand faster security fixes.

Market Sentiment

Cautiously Bearish, Stress-on, Event-driven.

Reason: The reported Coldcard exploit drained just over $100 million in bitcoin, which can weaken confidence in self-custody security.

Similar Past Cases

In June 2023, Atomic Wallet users lost more than $35 million in a wallet hack, and the event pushed attention toward wallet security rather than exchange solvency. (Fortune) The difference is that the current event centers on Bitcoin code bases and a hardware wallet exploit, while the Atomic Wallet case involved a multi-asset wallet.

Ripple Effect

Security failures can reduce trust in self-custody and push users toward simpler custody choices. If project owners confirm fixes and users migrate funds, then spillover may remain contained. If new critical bugs surface before patches, then users may reassess hardware wallet and open-source wallet risk.

Opportunities & Risks

Opportunities: If project owners publish fixes and users complete migrations, then restored confidence can be a potential re-risking signal for Bitcoin-related infrastructure.

Risks: If the ongoing threat continues or more critical issues are verified before fixes, then reducing exposure to affected self-custody setups limits operational downside.