Long among Bitcoin's biggest selling points has been that investors don't need to trust banks and exchanges to safeguard their money.
That promise suffered one of its biggest blows — maybe ever — after a flaw in popular hardware wallet maker Coinkite's Coldcard allowed attackers to recreate wallet recovery phrases and steal bitcoin from what users believed were securely self-custodied wallets.
The flaw has since been patched but the fallout continues. Affected users must generate entirely new wallets and move their funds because updating the firmware alone doesn't eliminate the risk.
'Move your funds now'
"If you generated a seed using a Coldcard wallet, move your funds now, using our updated best practices, before reading further," wrote Coinkite CEO NVK in an open letter a short time ago. He added that while the fix protects new seeds going forward, it does not fix seeds already generated on vulnerable firmware.
The exploit exposes a growing tension as bitcoin enters the financial mainstream: self-custody remains one of the cryptocurrency's defining features, but the technical burden of securing private keys may increasingly push ordinary investors toward professional custodians, exchanges and regulated investment products instead.
Some prominent bitcoin advocates say the incident is among the most damaging failures of self-custody the industry has experienced.
"This is the worst hit in bitcoin history to the most knowledgeable and 'properly secured' bitcoiners," said Bitcoin commentator Guy Swann. "This isn't an exchange getting hacked because of hot keys. This is thousands of individuals having their personal private keys recreated out from underneath them."
Trading one risk for another
For years, bitcoin advocates have argued that holding private keys removes the counterparty risk of centralized exchanges, a lesson reinforced by failures such as FTX. Analysts now argue that users have simply exchanged one set of risks for another.
"The self-custodial hardware space is a disaster at this point and creates more bad rep for the industry than anything else," said Lorenzo Valente, director of digital asset research at ARK Invest.
"In practice, consumers have traded counterparty risk for software risk, hardware risk, supply-chain risk, phishing risk, backup risk, and the possibility of losing everything through one mistake," he said. "Frankly, you are better off today holding funds across several publicly-traded exchanges or ETFs."
The Coldcard flaw illustrates that challenge. Researchers found that certain firmware versions generated wallet seeds using far less randomness than intended, making them susceptible to brute-force attacks.
Bitcoin NewsHack
Latest Crypto News
- 1 Quantum computing nears commercial breakthrough, IBM CEO says1 hour ago
- 2 Crypto faces 3 barriers to next bull run, STS Digital CEO says2 hours ago
- 3 Circle secures New York trust charter as crypto regulatory push accelerates3 hours ago
- 4 Coinbase's weak quarter leaves Wall Street split on timing of a recovery3 hours ago
- 5 RWA perps will outpace tokenization4 hours ago
- 6 Dubai-based crypto exchange tied to $4 billion Iran sanctioned-evasion network4 hours ago
- 7 World Cup bets smash records as prediction markets hit $20 billion in volume5 hours ago
- 8 U.S. sanctions Iran-linked bitcoin insurance scheme for Strait of Hormuz ships5 hours ago
- 9 Traders brace for an August crypto pull-back as protection against $60,000 bitcoin dip becomes top trade5 hours ago
- 10 Bitcoin, ether fall, equities rally with broader crypto market on track for best month in a year6 hours ago
Latest Research
The Evolution of the Crypto CEX Landscape: A Case Study on Binance
The Evolution of the Crypto CEX Landscape: A Case Study on Binance
Binance remains crypto’s leading exchange, expanding from spot and derivatives into RWAs, payments, savings, yield, and broader financial services.
By CoinDesk Research Jun 29, 2026 Commissioned byBinanceBinance remains crypto’s leading exchange, expanding from spot and derivatives into RWAs, payments, savings, yield, and broader financial services.
Why it matters:
Binance remains crypto’s leading exchange, expanding from spot and derivatives into RWAs, payments, savings, yield, and broader financial services.
View Full Report More From Finance
Dubai-based crypto exchange tied to $4 billion Iran sanctioned-evasion network
Quantum Solutions, Hyperscale Data tap crypto treasuries to fund AI data centers
