For years the whole pitch behind a Coldcard was that nobody could reach your Bitcoin unless they were physically holding the device in their hands.

That promise came apart this week, when an attacker quietly swept around 1,082 BTC, worth roughly $70 million, out of more than a thousand wallets in under an hour. The unsettling part is that the thief never touched a single device, never phished anyone, and never needed a PIN or a password. These coins were sitting in cold storage, offline, kept exactly the way every self-custody guide tells you to keep them. And they walked out anyway. For a corner of crypto that treats hardware wallets as the gold standard of safety, this is a genuinely rough moment.

Blockchain analysts at Galaxy Digital, who have been tracking the drain, first put the losses near $38 million before revising the number upward as more addresses turned up in the sweep. Hardware wallet maker Coinkite has confirmed the flaw and rushed out patched firmware, but by then the money was long gone. According to Coinkite's own security advisory, the theft happened roughly a day before the company managed to warn users publicly, so plenty of people watched their balances drop to zero before they had any idea anything was wrong. When your entire brand is built on paranoid, belt-and-suspenders security, a delay like that is about as bad as it gets. The company says it is still working to pin down the full scope of the damage.

A five-year-old bug in how the wallet made its keys

The root cause here is boring and alarming at the same time. When you set up a hardware wallet, it is supposed to build your seed phrase from true randomness, the kind that makes guessing it mathematically hopeless. Somewhere in a firmware build shipped back in March 2021, Coldcard's software started skipping its dedicated hardware random number generator and quietly fell back to predictable values pulled from the chip itself. Instead of the expected 128 bits of entropy, affected Mk3 devices were producing seeds with only about 40 bits, and later Mk4, Mk5 and Q models landed somewhere around 72 bits. In plain English, the recovery phrase that was meant to be unguessable became something a determined attacker with modern hardware could grind through.

What makes it worse is that this sat undetected for more than five years. Every wallet created on the affected builds carried the same weakness baked in from the very start, whether or not the owner ever did a single thing wrong. Some researchers have suggested that automated or AI-assisted tooling may have helped the attacker chew through the reduced keyspace fast enough to clear so many wallets in one sitting, though that claim has not been confirmed. Coinkite says the fixed firmware restores proper randomness, but a patch cannot rewrite history. Any seed generated on the old software still exists in its weakened form, which is exactly why the advice coming out now has been so blunt.

The people who got hit did everything "right"

This one stings because it landed on the folks who followed the standard advice to the letter. The drained wallets largely belonged to long-term holders who pulled their coins off exchanges years ago and left them sitting untouched in cold storage, which is supposed to be the responsible move. Their reward for being careful was watching those balances vanish while newer and less disciplined traders on custodial platforms were completely unaffected. There is a bitter twist buried in here too. Users who bothered to add their own dice rolls during setup, or who layered on a passphrase or a multisig arrangement, appear to have been protected, because that extra input put back the randomness the firmware had thrown away, and the people most exposed were the ones who simply trusted the device to handle its single most important job.

What to do if you own one

If you have a Coldcard, the guidance from Coinkite is direct: treat your seed as compromised and move your funds. That means updating to the patched firmware, generating a brand new seed on that updated hardware, and then sending everything over to the fresh wallet, because a firmware update on its own fixes nothing when the weak seed already exists. Annoyingly, there is no self-test that tells you whether your particular seed falls inside the guessable range, so the only safe assumption is that it might. You can check your firmware version under the Advanced menu on the device, and anything generated on the vulnerable builds between 2021 and the recent fix should be treated as suspect. Bitcoin slipped about 3% as the scale of the mess sank in, and the timing hands an easy talking point to everyone who has been pushing regulated custodians and spot ETFs over do-it-yourself storage.

The uncomfortable lesson is that "not your keys, not your coins" was always sold as the safer road, and for the most part it still is, but your keys only protect you if they were actually random to begin with. A single quiet build error hid for half a decade inside one of the most trusted names in Bitcoin self-custody, and it took a $70 million heist for anyone to catch it. None of this means hardware wallets are a scam or that cold storage is suddenly dead. It does mean the unglamorous stuff, the firmware updates and the extra entropy and the passphrases and the multisig setups, is the part that quietly saves you, right up until the day it turns out to be the only thing standing between you and an empty wallet.

---------------

Author: Cedric Holloway
New York Newsroom
Breaking Crypto News

At Galaxy Unpacked in London on July 22, the company confirmed that Samsung Wallet will get native stablecoin support, putting dollar-pegged tokens into the same app people already use to tap their phone at the checkout. For an industry that has spent years arguing stablecoins are the killer app for crypto, having one of the biggest hardware makers on earth agree out loud is a big deal. Samsung says the feature would make it one of the first major smartphone brands to support stablecoins natively on its devices, and that reach is the whole story here. This is a company that ships phones by the hundreds of millions every year, so the potential distribution dwarfs anything a standalone crypto wallet could ever dream of building on its own.

And yet, for an announcement this large, Samsung was strangely quiet on the details that actually matter. It showed a mockup with Circle's USDC on stage, then declined to name USDC, Tether, or any other issuer as a confirmed partner. There is no launch date, no word on which blockchains will be supported, no list of eligible countries, and no answer to the single most important question for anyone who cares about their money: will Samsung hold your funds, or will you? That last point, custodial versus non-custodial, is the difference between a real crypto wallet and a glorified balance display, and so far Samsung has said nothing about it. For a feature meant to inspire trust, that is a lot of blanks left unfilled.

The credit card is the part that's actually shipping

Buried under the stablecoin headlines was the thing Samsung actually launched that same day: the Samsung Galaxy Card. It's a credit card issued by Barclays and running on the Visa network, and it went live in the United States on July 22 with no "coming soon" asterisk attached. The rewards structure is aimed squarely at keeping you inside Samsung's world, with 5% back on Samsung purchases, 3% on anything you buy through Samsung Wallet, and 2% on streaming services. On its own that's a fairly ordinary co-branded card, the kind every big brand eventually launches to lock in loyal customers. What makes it interesting is the context, because Samsung is clearly trying to turn Wallet from a place you store a plane ticket into a full financial hub, and stablecoins are meant to be the piece that makes it all feel modern.

Read together, the card and the stablecoin tease point at the same ambition. Samsung wants Wallet to be where you keep money, spend money, and eventually move money, all without opening a separate banking or crypto app. The card handles the spending side today, and it works right now. The stablecoin support, whenever it actually arrives, is supposed to handle the moving-money-around side, letting people send digital dollars roughly as easily as they send a photo. It's a coherent plan on paper, but plans on paper have a habit of slipping, and Samsung gave itself plenty of room to slip by refusing to commit to any date at all.

Wider implications

Even if you never personally plan to keep a single dime of USDC in your phone, if you trade crypto this is good news. Retail crypto adoption has historically gone stablecoins first and speculation second. Someone who already holds a stablecoin balance in an app they trust is a much shorter walk away from buying bitcoin or ether than someone who holds nothing at all and has to sign up for an exchange from scratch. If Samsung genuinely puts even a basic stablecoin feature in front of a big chunk of its user base, it quietly widens the top of the funnel for the entire market. That's a slow-burn effect rather than an overnight one, and it won't show up on a candlestick chart next week no matter how much anyone wants it to.

Which is exactly why you shouldn't expect this to move prices in any immediate way. The crypto industry has a long and unimpressive record of "major partnership" and "mainstream adoption" headlines that felt enormous in the moment and then did absolutely nothing to the charts over the following month. Infrastructure announcements tend to work like that. They matter over years, not days, and this one is especially soft because so much of it is still a mockup and a promise rather than shipping code. Treat it as a directional signal about where consumer fintech is heading, which is clearly toward digital dollars living inside apps you already have, and not as a reason to reposition your portfolio today.

The small print

So where does all this leave things? Samsung has made a loud and credible commitment to putting stablecoins in front of an enormous audience, and that commitment is genuinely meaningful for the long arc of adoption. But a commitment with no named partner, no date, no chain, and no custody model is still mostly a statement of intent, and intent has always been cheap in this industry. The Galaxy Card is real and available now, the stablecoin wallet is a slide and a mockup, and the gap between those two things is worth remembering the next time someone tells you crypto just went mainstream overnight. Watch for the follow-up details in the months ahead, because that's when we'll actually find out whether Samsung is building a real crypto wallet or just a nicer place to stare at a number.

What the money actually buys

The structure here is worth understanding, because it is not what most people picture when they hear the word "consortium." The $15 million is not pooled into a shared war chest that some committee doles out. Each member directs its own share independently, choosing which developers, researchers or organizations to back with its dollars. The group has said it will not direct Bitcoin's development, will not take sides on proposed protocol changes, and will not touch governance in any form. In plain terms, they are writing checks and then stepping back, which for a network built on the idea that no big player should be able to steer it is a meaningful promise to make in public.

Galaxy had already gotten a head start, launching a separate $5 million quantum readiness effort two days earlier that focuses on quantum-resistant signatures, wallet migration tools and security audits. Whether that money folds into the $15 million total or sits alongside it was never made clear, which is a small reminder that this whole space is still being figured out on the fly. What matters is the direction of travel. A year ago the quantum question lived mostly in academic papers and the darker corners of crypto Twitter. Now it has a line item on the budgets of some of the largest financial firms on the planet, and that shift alone tells you something changed.

Why quantum keeps everyone up at night

Bitcoin's security rests on a type of math that ordinary computers cannot crack in any reasonable amount of time. A powerful enough quantum computer running an approach called Shor's algorithm could change that by working backward from a public key to the private key that controls the coins. The uncomfortable part is that any address that has ever exposed its public key on the blockchain is potentially in range of that kind of attack. Researchers estimate that roughly a quarter of all Bitcoin sits in addresses with exposed public keys, including around 1.9 million BTC in the oldest address format and several million more in addresses that have been reused. Nobody thinks a machine capable of this exists today, and credible estimates put it a few years out.

The scarier wrinkle is that an attacker does not need the quantum computer to exist yet in order to start preparing. Public keys sitting on a public blockchain can be copied and archived right now, then cracked later once the hardware finally catches up. Security researchers have a grim name for this waiting game, calling it "harvest now, decrypt later." It means the clock is already running even though the weapon has not been built, and it explains why firms with a lot of Bitcoin on their books would rather fund the fix years early than gamble on exactly when the threat becomes real. Prevention is a lot cheaper than trying to claw back coins that have already vanished into a quantum attacker's wallet.

The coins nobody can rescue

There is one pile of Bitcoin the consortium's money can never protect, no matter how good the new cryptography gets. Satoshi Nakamoto's estimated one million or so coins sit in the original Pay-to-Public-Key format, with the public keys written directly onto the blockchain for anyone to see. Moving that Bitcoin to a safer, quantum-resistant address would require signing a transaction with Satoshi's private keys, and Bitcoin's creator has been silent for well over a decade. So those coins stay exactly where they are, permanently visible, essentially a giant target that will be sitting there whenever quantum hardware finally arrives. It is one of the stranger tensions in all of crypto, where the founder's untouchable fortune doubles as the network's most obvious weak spot.

The good news is that the tools to fix most of this already exist, since standards bodies have approved several post-quantum signature schemes that Bitcoin could eventually adopt. What has been missing is money, coordination and a sense of urgency from the players with the most to lose, and that is exactly the gap this consortium is trying to close. Fifteen million dollars will not quantum-proof Bitcoin on its own, and the hardest technical and political work of actually changing the protocol still lies ahead. But when firms this large start funding a problem years before it turns into an emergency, it is usually worth paying attention to what has them worried.