Attackers exploited a March 2021 firmware bug in Coldcard wallets to drain approximately 1,816 BTC (~$116 million) across multiple waves starting July 30, 2026.
The vulnerability cut effective entropy to as low as 40 bits on older models, enabling remote brute-force of seeds without physical access.
Coinkite released emergency firmware fixes, but existing seeds remain vulnerable and require full migration to new wallets.
The incident ranks...
Coldcard Hardware Wallet Losses Approach $130 Million as Galaxy Flags Ongoing Multi-Attacker Exploit
Written on .
Galaxy Research has high confidence that 1,596 BTC (over $100 million) was stolen from roughly 7,300 addresses across three confirmed attack waves plus 14 smaller incidents.
Including a suspected fourth wave would raise the total to about 2,055 BTC, or roughly $130 million.
At least 15 separate attackers are now exploiting the vulnerability; 90% of stolen coins have not moved.
Coinkite has released emergency firmware updates and urged users...
BlackRock Launches Two Tokenized Money Market Funds Aimed at Stablecoin Reserves
Written on .
BlackRock launched the BlackRock Daily Reinvestment Stablecoin Reserve Vehicle (BRSRV) and OnChain Shares of its Select Treasury Based Liquidity Fund (BSTBL) on Monday.
Both products invest in cash, short-term U.S. Treasuries and Treasury-backed repos and are structured to qualify as eligible reserve assets under the GENIUS Act.
BSTBL OnChain Shares are issued on Ethereum with BNY as transfer agent; BRSRV supports multiple blockchains...
Coldcard Firmware Flaw Drains Nearly $89 Million in Bitcoin From Over 4,500 Addresses
Written on .
Attackers have swept 1,367.05 BTC (nearly $89 million) from 4,585 addresses linked to weak Coldcard-generated seeds across three waves.
The largest wave on July 30 drained 1,082.65 BTC from 1,196 addresses in 41 minutes.
Coinkite attributes the issue to a March 2021 firmware bug that reduced seed entropy and has released fixed versions while urging users to generate new seeds.
Galaxy Research says the exploit remains ongoing and has reported...
New York AG Sues Kalshi Seeking $36 Billion Over Alleged Illegal Gambling via Prediction Markets
Written on .
New York Attorney General Letitia James filed a lawsuit on July 31, 2026, alleging Kalshi operates an illegal, unlicensed gambling platform through its prediction markets.
The state seeks at least $36 billion in damages, treble penalties, full restitution, and a temporary restraining order to stop event contracts in New York.
Officials claim the platform allows users under 21 to wager and bypasses state gaming taxes and licensing...

