Coldcard bug: over 1,200 BTC worth $70M stolen in 40 minutes

On 30 July 2026, over 1,000 Bitcoin worth approximately $70 million disappeared from nearly 1,200 addresses in just 40 minutes. The cause was a critical software vulnerability in Coldcard hardware wallets made by the Canadian company Coinkite. Victims had not clicked suspicious links or disclosed their recovery phrases — the software flaw alone was responsible.