{"id":76176,"date":"2026-07-31T04:07:51","date_gmt":"2026-07-31T04:07:51","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/coinkite-warns-coldcard-mk3-owners-after-reports-of-38m-bitcoin-loss-bitcoin-news\/"},"modified":"2026-07-31T04:07:51","modified_gmt":"2026-07-31T04:07:51","slug":"coinkite-warns-coldcard-mk3-owners-after-reports-of-38m-bitcoin-loss-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/coinkite-warns-coldcard-mk3-owners-after-reports-of-38m-bitcoin-loss-bitcoin-news\/","title":{"rendered":"Coinkite Warns Coldcard Mk3 Owners After Reports of $38M Bitcoin Loss \u2013 Bitcoin News"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Coinkite issued a security advisory for Coldcard Mk3 users on July 30, 2026.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Reports show about 594 BTC, near $38 million, left roughly 500 dormant wallets.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Coinkite\u2019s advisory covers Mk3 firmware 4.0.1 through 5.0.3, its final supported release.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Hardware wallet incidents rarely unfold as isolated events. When long-dormant addresses begin moving in a tightly coordinated pattern, the timing alone warrants scrutiny. That was the case on July 30, 2026, when <a href=\"https:\/\/wublock123.com\/news\/594-btc-moved-from-500-single-signature-addresses-unknown-reason-65643\" target=\"_blank\" rel=\"noopener noreferrer\">an alleged 594 BTC, worth about $38 million<\/a>, moved from approximately 500 single-signature addresses within roughly 25 minutes.<\/p>\n<p><\/p>\n<p>Many of the wallets had remained inactive for years, with balances typically ranging from 0.15 to 0.26 BTC. At the time of writing, despite <a href=\"https:\/\/x.com\/PraveenPerera\/status\/2082976249371115811?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">widespread discussions online<\/a>, the company has not confirmed whether the transfer of nearly 600 BTC is directly connected to the Coldcard security advisory.<\/p>\n<h2>What Coinkite Says<\/h2>\n<p>Coinkite CEO Rodolfo Novak, known in the industry as NVK, said the company is treating the reports with urgency. \u201cWe are all hands on deck doing a deep dive on everything, technical post soon,\u201d <a href=\"https:\/\/x.com\/nvk\/status\/2082962357777555534?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">Novak said on X<\/a>. He added that the company\u2019s communication channels were \u201cbombarded\u201d with inquiries following the reports. In a <a href=\"https:\/\/x.com\/nvk\/status\/2082946325088231471?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">separate update, Novak stressed<\/a>, \u201cWe\u2019ve done alot of investigation about the COLDCARD reports, blog post incoming.\u201d<\/p>\n<p>The company\u2019s <a href=\"https:\/\/blog.coinkite.com\/coldcard-mk3-seed-generation-warning\/\" target=\"_blank\" rel=\"noopener noreferrer\">security advisory blog post<\/a> names a specific range of affected devices. Anyone who generated a seed on a Mk3 running firmware version 4.0.1, released in March 2021, through version 5.0.3, the final release supporting the Mk3, may be affected. Coinkite explained that its early analysis shows the Mk4, Q and Mk5 models are not affected.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-835517 size-full\" title=\"Coinkite Warns Coldcard Mk3 Owners After Reports of $38M Bitcoin Loss\" src=\"https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2026\/07\/screenshot-2026-07-30-at-8-07-11-pm.png\" alt=\"X post screenshot \" width=\"1330\" height=\"534\" srcset=\"https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2026\/07\/screenshot-2026-07-30-at-8-07-11-pm-300x120.png 300w, https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2026\/07\/screenshot-2026-07-30-at-8-07-11-pm-1024x411.png 1024w, https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2026\/07\/screenshot-2026-07-30-at-8-07-11-pm-768x308.png 768w, https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2026\/07\/screenshot-2026-07-30-at-8-07-11-pm.png 1330w\" sizes=\"auto, (max-width: 1330px) 100vw, 1330px\"\/><\/p>\n<p>Coinkite described the advisory as reflecting early findings, and said a formal technical review will follow as the investigation continues. Community researchers have been reviewing onchain activity tied to the reports. Discussion has centered on the possibility of weak randomness in seed generation on certain older Mk2 and Mk3 firmware versions, rather than a supply chain compromise. At the time of publication, Coinkite has not confirmed a root cause.<\/p>\n<h2>Passphrase Users Face Lower Risk<\/h2>\n<p>According to the advisory, wallets protected with a BIP-39 passphrase, a user-added phrase distinct from the device PIN, appear to carry minimal risk under Coinkite\u2019s early analysis. The company advised passphrase users to keep protecting that phrase and avoid entering it on untrusted devices or websites.<\/p>\n<p>For Mk3 owners <a href=\"https:\/\/www.bitcoin.com\/get-started\/wallet-security\/wallets-custody\/how-to-backup-and-restore-a-crypto-wallet\/\" target=\"_blank\" rel=\"noopener noreferrer\">who did not use a passphrase<\/a>, Coinkite recommended migrating to a new seed generated on an unaffected device. The company said the process should not be rushed. It advised sending a small test transaction first, verifying the new wallet and receive address on the device screen, and holding onto the old backup until the migration is confirmed.<\/p>\n<h2>Interim Options<\/h2>\n<p>Coinkite outlined two interim steps for owners whose Mk3 is their only device:<\/p>\n<ul>\n<li aria-level=\"1\">Add a strong, unique BIP-39 passphrase and move funds to the newly protected wallet.<\/li>\n<li aria-level=\"1\">Generate a replacement seed using the Mk3\u2019s dice-roll import path, which does not rely on the device\u2019s random number generator, though Coinkite described this as an advanced procedure requiring careful verification.<\/li>\n<\/ul>\n<p>Coinkite published full technical steps in its advisory, available on the company\u2019s blog. The company explained its investigation is ongoing and that additional details will follow. Coldcard has built a reputation as a security-focused, air-gapped hardware wallet option since its release, and the reports have drawn wide attention across the Bitcoin community as owners assess their own devices.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/crypto-news\/coinkite-warns-coldcard-mk3-owners-after-reports-of-38m-bitcoin-loss\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Coinkite issued a security advisory for Coldcard Mk3 users on July 30, 2026. Reports show about 594 BTC, near $38 million, left roughly 500 dormant wallets. Coinkite\u2019s advisory covers Mk3 firmware 4.0.1 through 5.0.3, its final supported release. Hardware wallet incidents rarely unfold as isolated events. [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":76177,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76176"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=76176"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76176\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/76177"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=76176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=76176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=76176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}