Analysis: What the Coldcard Flaw Means for What a Hardware Wallet Actually Guarantees
A hardware wallet makes three promises. The Coldcard entropy failure broke the one nobody thought to verify — and the one a user cannot check after the fact.
Searches every incident record, jurisdiction page, glossary term and guide.
Breaking and developing coverage of crypto security incidents, exploits and regulation. Every story cites a primary document or names the outlet that reported it, and carries The Ledger: what happened, who is exposed, how to verify it yourself, and what changes.
12 articles
A hardware wallet makes three promises. The Coldcard entropy failure broke the one nobody thought to verify — and the one a user cannot check after the fact.
Wallets and key infrastructure accounted for 54% of July's losses. Across our own 25-record tracker, key compromise is already the largest attack…
Monthly loss tallies put July 2026 at roughly $210m across 30 major incidents, up 177% on June. Wallets and key infrastructure —…
The CLARITY Act proposes a statutory division of authority between the SEC and CFTC. Coverage frequently describes it as settled. It is…
A 2021 firmware change routed Coldcard seed generation through a software pseudorandom generator instead of the hardware RNG, cutting entropy from 128…
More than $57m was reported lost across three protocols to price-feed manipulation in July — the same failure mode, three times, in…
A governance bypass at BonkDAO was reported to have moved $21.2m — the fourth governance-path failure in our records, and the same…
Two more cross-chain bridges failed on message validation in July, taking a reported $20.5m combined — the fifth and sixth bridge validation…
Following a memorandum of understanding in March, the two agencies published a joint interpretation — the first substantive coordination on a boundary…
Treasury Secretary Scott Bessent has said the Department is proceeding with "deliberate speed" toward final rules under the GENIUS Act, moving US…