Skip to content
Back to Guavy Wire
Crypto

Coldcard Wallet Exploit Drains Over $100 Million

Instruments
BTC
Share

A Coldcard wallet exploit has drained around $114 million from self-custodied wallets since at least August 4, 2026. Coinkite developers are urging affected users to move their funds immediately.

The vulnerability affects certain Mk3 devices set up on firmware 4.0.1 or later and Mk4, Mk5, and Q devices on older firmware. Wallets created using the dice-roll option are considered safe.

According to Coinkite, the flaw allows attackers to guess poorly randomized seed keys and drain funds, even as Bitcoin's price remains near $63,800.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment advisor. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Real-time market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc