Coldcard Hardware Wallet Flaw Blamed for $130M Bitcoin Theft

A critical security flaw in Coldcard hardware wallets has been linked to one of 2026's largest cryptocurrency breaches, with losses now exceeding $130 million in stolen Bitcoin. Coldcard devices are widely used to store cryptocurrency offline, away from internet-connected systems, on the assumption that this makes them harder to compromise.

While details on how the vulnerability was exploited remain limited, the scale of the losses highlights that even hardware designed specifically for security can contain flaws that attackers exploit. For Australian small businesses that hold or accept cryptocurrency, this incident is a reminder that no storage method is automatically safe just because it's offline or marketed as secure.

Businesses using hardware wallets or similar devices should stay alert to firmware update notices from manufacturers and avoid delaying installation of security patches, as vulnerabilities like this can be exploited quickly once discovered.