Shift

random

Revolution

Summit

<p><strong>A reported security flaw affecting Coldcard hardware wallets has been followed by unconfirmed reports of a 39,600 BTC shift concentrated among wallets each holding less than 1 BTC, a sequence that has drawn attention to self-custody risk even as the underlying on-chain movement remains unverified.</strong></p><div class="on-chain-data" style="background:#0d0d17;border-left:3px solid #e040fb;padding:16px 20px;margin:20px 0;border-radius:4px"><p style="margin:0 0 8px;color:#e040fb;font-weight:600;font-size:14px">TLDR KEYPOINTS</p><ul style="margin:0;color:#e6edf3"><li>A random number generation flaw in Coldcard firmware has been publicly documented and linked to Bitcoin theft.</li><li>Unconfirmed reports describe a 39,600 BTC shift across wallets each holding under 1 BTC following the incident.</li><li>The wallet movement has not been traced to a verifiable block explorer entry, so causation with the flaw is not established.</li></ul></div><h2 id="what-is-confirmed-about-the-coldcard-flaw-and-what-is-not">What is confirmed about the Coldcard flaw, and what is not</h2><p>Coldcard maker Coinkite published a <a href="https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/" rel="noopener noreferrer nofollow">seed generation warning</a> for its Mk3 devices, flagging a weakness in how certain units generated wallet seeds. For related coverage, see <a href="https://www.nftenex.com/ai-revolution-summit-india-2026/" rel="noopener noreferrer nofollow">AI Revolution Summit – India 2026</a>.</p><p>Security researchers at BleepingComputer reported that the random number generation flaw was likely linked to roughly <a href="https://www.bleepingcomputer.com/news/security/coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft/" rel="noopener noreferrer nofollow">$88 million in Bitcoin theft</a>, describing the connection as probable rather than fully confirmed. For related coverage, see <a href="https://www.nftenex.com/best-nft-marketplaces-in-2026-match-the-platform-to-the-asset/" rel="noopener noreferrer nofollow">Best NFT Marketplaces in 2026: Match the Platform to the Asset</a>.</p><p>An engineering teardown from Block detailed a <a href="https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware" rel="noopener noreferrer nofollow">predictable RNG fallback and 32-bit reseed</a> in the firmware, the technical mechanism that could make affected seeds guessable.</p><p>The timeline that can be stated with confidence is limited: the firmware weakness was documented, and reporting has tied it to a specific theft figure. The 39,600 BTC redistribution named in the headline sits outside that verified record and should be read as an unconfirmed claim.</p><h2 id="why-movement-across-sub-1-btc-wallets-stands-out">Why movement across sub-1 BTC wallets stands out</h2><p>A wallet holding less than 1 BTC is, in practical terms, a small-balance address, the kind associated with retail holders rather than exchanges or institutional custodians. Activity across many such wallets points to a fragmented rather than a single-entity pattern.</p><p>The reported movement is unverified. No block explorer entry, transaction hash, sender or receiver address, or timestamp has been made available in the sourcing reviewed here, so the figure cannot be independently traced on-chain.</p><p>Where a large volume does move across many small wallets, non-speculative explanations exist, including coordinated sweeps of compromised keys, exchange internal reorganizations, or clustering of addresses controlled by one operator. None of these can be confirmed for this specific claim without the underlying transaction data.</p><h2 id="what-hardware-wallet-users-can-take-from-this">What hardware wallet users can take from this</h2><p>The documented issue is a firmware-level seed generation weakness, which matters because a wallet's security ultimately rests on the unpredictability of its seed. Users of affected Coldcard devices should follow the manufacturer's official firmware and seed guidance rather than act on unverified transfer figures.</p><p>The episode echoes earlier scrutiny of single-signature setups, including warnings that surfaced after a separate <a href="https://www.nftenex.com/peter-todd-warns-single-sig-bitcoin-risks-coldcard-drain/" rel="noopener noreferrer nofollow">Coldcard drain raised single-sig risk concerns</a>, reinforcing that device trust depends on verifiable disclosures.</p><p>Self-custody risk management is also a function of who holds crypto and how, a picture reflected in adoption data such as the finding that <a href="https://www.nftenex.com/osc-25-percent-canadians-own-crypto/" rel="noopener noreferrer nofollow">a quarter of Canadians now hold crypto assets</a>, and in shifting retail activity like the <a href="https://www.nftenex.com/south-korea-crypto-trading-volume-fell-54-6-percent-h1/" rel="noopener noreferrer nofollow">54.6% drop in South Korea's trading volume</a>. Readers should weight verified manufacturer updates over rumor-driven wallet-movement figures.</p><p style="font-size:13px;color:#888;border-top:1px solid #333;padding-top:12px;margin-top:30px">Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://www.nftenex.com/?p=10221" rel="noopener noreferrer nofollow">Read original article on nftenex.com</a>

Coldcard Hack Followed by 39,600 BTC Shift in Small Wallets

Table of Contents

NFTENEX

Other articles published on Aug 3, 2026

South Korean stablecoin outflows top $367M in June: Report

SBI says its Ripple stake alone is worth $41B as XRP waits on the CLARITY Act

XRP spot ETFs quietly cross $1.5B in lifetime inflows

Lummis goes after "Big Bank Beth" as the CLARITY Act fight turns personal

OPEC+ to Raise September Oil Output by 188,000 Barrels Per Day

AUD/USD Climbs Toward 0.7050 as Trump Calls Off Iran Strikes, Boosting Risk Appetite

Join our free newsletter for daily crypto updates!