Analysis: What the Coldcard Flaw Means for What a Hardware Wallet Actually Guarantees
A hardware wallet makes three promises. The Coldcard entropy failure broke the one nobody thought to verify — and the one a user cannot check after the fact.
Searches every incident record, jurisdiction page, glossary term and guide.
Exploits, wallet and key compromises, protocol vulnerabilities and exchange incidents as they are disclosed.
7 articles
A hardware wallet makes three promises. The Coldcard entropy failure broke the one nobody thought to verify — and the one a user cannot check after the fact.
Wallets and key infrastructure accounted for 54% of July's losses. Across our own 25-record tracker, key compromise is already the largest attack…
Monthly loss tallies put July 2026 at roughly $210m across 30 major incidents, up 177% on June. Wallets and key infrastructure —…
A 2021 firmware change routed Coldcard seed generation through a software pseudorandom generator instead of the hardware RNG, cutting entropy from 128…
More than $57m was reported lost across three protocols to price-feed manipulation in July — the same failure mode, three times, in…
A governance bypass at BonkDAO was reported to have moved $21.2m — the fourth governance-path failure in our records, and the same…
Two more cross-chain bridges failed on message validation in July, taking a reported $20.5m combined — the fifth and sixth bridge validation…