Flaw in Coldcard wallets allows hacker to drain $38 million Bitcoin

A critical security flaw in Coldcard hardware wallets allowed attackers to drain $38 million in Bitcoin from affected users. The manufacturer believes an artificial intelligence system identified the underlying vulnerability before executing the exploit. This incident highlights growing concerns over automated security exploits targeting self-custody solutions in the cryptocurrency market. Investors are advised to update their device firmware immediately as security teams work to mitigate further risks across affected hardware wallet models.
Key takeaways
- 1Attackers exploited a key flaw in Coldcard wallets to steal $38 million in Bitcoin.
- 2The hardware wallet's manufacturer suspects artificial intelligence was used to discover the key vulnerability.
- 3Users are urged to check firmware updates and evaluate the security of self-custody setups.
Coins in this story
Why it matters
AI-driven exploits against hardware wallets present new security risks for self-custody Bitcoin holders. Investors should monitor firmware patches and review key generation processes to protect long-term assets against automated vulnerabilities.
Discussion
Related stories

Claude Hacked Three Companies in Internal Testing: Anthropic
Anthropic says three Claude models compromised the companies after a testing misconfiguration exposed the AI to the public internet....

Coinbase reports surprise quarterly loss as retail crypto trading slows
Coinbase posted a surprise loss in its latest quarterly financial results, driven by a sharp drop in overall crypto trading volumes. Major digital assets including Bitcoin and Ethereum experienced stagnant price action, suppressing retail activity across the platform. Transaction revenue fell significantly, missing Wall Street expectations. While subscription and services revenue showed slight resilience, reduced market volatility continues to pressure the exchange's broader financial outlook and long-term profitability.

Texas lawmakers weigh crypto kiosk ban after scams cost $57 million
Texas lawmakers are considering a ban on crypto kiosks following reports that state residents lost $57 million to scams involving the machines. Fraudsters frequently target elderly victims, using coercion and fraudulent claims to trick them into depositing cash at physical Bitcoin ATMs. State regulators are pushing for tighter oversight or a complete prohibition to curb escalating financial losses, which could set a precedent for crypto kiosk regulations across other states.