{"id":51195,"date":"2026-07-31T09:47:47","date_gmt":"2026-07-31T09:47:47","guid":{"rendered":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/"},"modified":"2026-07-31T09:47:47","modified_gmt":"2026-07-31T09:47:47","slug":"coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses","status":"publish","type":"post","link":"https:\/\/cryptd.in\/id\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/","title":{"rendered":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses"},"content":{"rendered":"<p>Coinkite, the Canadian company behind the Coldcard hardware wallet, has warned users that Bitcoin funds may be at risk if their wallet seed was generated on certain affected firmware versions.<\/p>\n<p>The company said the issue affects every Mk3 firmware release since version 4.0.1, released in March 2021, and is linked to the device-generated entropy used when creating seeds.<\/p>\n<h2>Funds Still at Risk<\/h2>\n<p>Seeds generated on Mk4 and Mk5 before firmware version 5.6.0, and on Q before version 1.5.0Q, are also affected, although Coinkite <a href=\"https:\/\/blog.coinkite.com\/coldcard-mk3-seed-generation-warning\/\">said<\/a> the impact on those models is less severe but remains serious. According to the company, affected seeds have around 72 bits of entropy instead of the expected 128 bits. According to the update, TAPSIGNER, OPENDIME, and SATSCARD are not affected because they use different codebases.<\/p>\n<p>Coinkite urged users with affected ones to migrate their funds to a newly generated seed on an unaffected device. The company said Mk4 and Mk5 users should first upgrade to firmware version 5.6.0 or later, while Q users should install version 1.5.0Q or later before generating a replacement seed.<\/p>\n<p>Users were also advised to back up and verify the new seed, confirm a new receive address on the device, and send a small test transaction before moving the remaining funds. If the Mk3 is the only available option, it suggested temporarily using a strong, unique BIP-39 passphrase and carefully verifying the wallet fingerprint and receive address.<\/p>\n<h2>Large Scale Theft<\/h2>\n<p>The advisory came after several reports emerged on July 30 that Bitcoin had been drained from Coldcard wallets. Atlas21 reported that an automated operation <a href=\"https:\/\/atlas21.com\/594-bitcoin-drained-15-minutes-theft\/\">swept<\/a> 500 single-signature addresses across four consecutive blocks, from 960188 to 960191. The transactions moved 1,324 UTXOs totaling 594.5 BTC, which is worth around $38 million at current prices. Evidence pointed to weak private keys generated when the wallets were created.<\/p>\n<p>No multisig or Taproot wallets <a href=\"https:\/\/x.com\/Rob1Ham\/status\/2082896614218203616\">were<\/a> among the victims.<\/p>\n<p>The median loss was 0.41 BTC, while 110 victims lost more than one Bitcoin. The largest loss was 29.9 units of the crypto asset, while the operation cost about 0.044 units in transaction fees. Atlas21 said the first public warning came from a victim on Reddit, who said their Coldcard had generated the 24-word seed phrase in 2021 and that the seed had never been entered on a computer.<\/p>\n<p>Despite the massive drain, Bitcoin\u2019s price remained unfazed as it <a href=\"https:\/\/cryptopotato.com\/bitcoin-ethereum-outperform-markets-in-july-as-chip-stocks-plunge-22\/\">continued<\/a> to trade near $64,000.<\/p>\n<p>Pos <a href=\"https:\/\/cryptopotato.com\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/\">Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses<\/a> muncul pertama kali di <a href=\"https:\/\/cryptopotato.com\/\" rel=\"nofollow\">CryptoPotato<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Coinkite, the Canadian company behind the Coldcard hardware wallet, has warned users that Bitcoin funds may be at risk if their wallet seed was generated on certain affected firmware versions. The company said the issue affects every Mk3 firmware release since version 4.0.1, released in March 2021, and is linked to the device-generated entropy used [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":51197,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-51195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-feeds"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptd.in\/id\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in\" \/>\n<meta property=\"og:description\" content=\"Coinkite, the Canadian company behind the Coldcard hardware wallet, has warned users that Bitcoin funds may be at risk if their wallet seed was generated on certain affected firmware versions. The company said the issue affects every Mk3 firmware release since version 4.0.1, released in March 2021, and is linked to the device-generated entropy used [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptd.in\/id\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/\" \/>\n<meta property=\"og:site_name\" content=\"cryptd.in\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T09:47:47+00:00\" \/>\n<meta name=\"author\" content=\"cryptd.in\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"cryptd.in\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/\"},\"author\":{\"name\":\"cryptd.in\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/person\\\/7973e8183bc6723b86adfe84d5af0ce4\"},\"headline\":\"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses\",\"datePublished\":\"2026-07-31T09:47:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/\"},\"wordCount\":406,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Hack-oRa8Zk.jpg\",\"articleSection\":[\"Feeds\"],\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/\",\"url\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/\",\"name\":\"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Hack-oRa8Zk.jpg\",\"datePublished\":\"2026-07-31T09:47:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Hack-oRa8Zk.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Hack-oRa8Zk.jpg\",\"width\":1201,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptd.in\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#website\",\"url\":\"https:\\\/\\\/cryptd.in\\\/\",\"name\":\"cryptd.in\",\"description\":\"Alternative LinkedIn for Crypto-friendly Talents\",\"publisher\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptd.in\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\",\"name\":\"cryptd.in\",\"url\":\"https:\\\/\\\/cryptd.in\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/cryptdin_logo.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/cryptdin_logo.jpg\",\"width\":900,\"height\":900,\"caption\":\"cryptd.in\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/person\\\/7973e8183bc6723b86adfe84d5af0ce4\",\"name\":\"cryptd.in\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374\",\"caption\":\"cryptd.in\"},\"sameAs\":[\"http:\\\/\\\/cryptd.in\"],\"url\":\"https:\\\/\\\/cryptd.in\\\/id\\\/author\\\/cryptd-in\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptd.in\/id\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/","og_locale":"id_ID","og_type":"article","og_title":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in","og_description":"Coinkite, the Canadian company behind the Coldcard hardware wallet, has warned users that Bitcoin funds may be at risk if their wallet seed was generated on certain affected firmware versions. The company said the issue affects every Mk3 firmware release since version 4.0.1, released in March 2021, and is linked to the device-generated entropy used [&hellip;]","og_url":"https:\/\/cryptd.in\/id\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/","og_site_name":"cryptd.in","article_published_time":"2026-07-31T09:47:47+00:00","author":"cryptd.in","twitter_card":"summary_large_image","twitter_misc":{"Ditulis oleh":"cryptd.in","Estimasi waktu membaca":"2 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#article","isPartOf":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/"},"author":{"name":"cryptd.in","@id":"https:\/\/cryptd.in\/#\/schema\/person\/7973e8183bc6723b86adfe84d5af0ce4"},"headline":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses","datePublished":"2026-07-31T09:47:47+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/"},"wordCount":406,"commentCount":0,"publisher":{"@id":"https:\/\/cryptd.in\/#organization"},"image":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/07\/Hack-oRa8Zk.jpg","articleSection":["Feeds"],"inLanguage":"id","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/","url":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/","name":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses - cryptd.in","isPartOf":{"@id":"https:\/\/cryptd.in\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#primaryimage"},"image":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/07\/Hack-oRa8Zk.jpg","datePublished":"2026-07-31T09:47:47+00:00","breadcrumb":{"@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/"]}]},{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#primaryimage","url":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/07\/Hack-oRa8Zk.jpg","contentUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/07\/Hack-oRa8Zk.jpg","width":1201,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptd.in\/coldcard-mk3-users-warned-of-risk-after-594-btc-swept-from-500-addresses\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptd.in\/"},{"@type":"ListItem","position":2,"name":"Coldcard Mk3 Users Warned of Risk After 594 BTC Swept From 500 Addresses"}]},{"@type":"WebSite","@id":"https:\/\/cryptd.in\/#website","url":"https:\/\/cryptd.in\/","name":"cryptd.in","description":"LinkedIn Alternatif untuk Talenta yang Ramah Kripto","publisher":{"@id":"https:\/\/cryptd.in\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptd.in\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":"Organization","@id":"https:\/\/cryptd.in\/#organization","name":"cryptd.in","url":"https:\/\/cryptd.in\/","logo":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/cryptd.in\/#\/schema\/logo\/image\/","url":"https:\/\/cryptd.in\/wp-content\/uploads\/2024\/05\/cryptdin_logo.jpg","contentUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2024\/05\/cryptdin_logo.jpg","width":900,"height":900,"caption":"cryptd.in"},"image":{"@id":"https:\/\/cryptd.in\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cryptd.in\/#\/schema\/person\/7973e8183bc6723b86adfe84d5af0ce4","name":"cryptd.in","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374","url":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374","contentUrl":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1785261374","caption":"cryptd.in"},"sameAs":["http:\/\/cryptd.in"],"url":"https:\/\/cryptd.in\/id\/author\/cryptd-in\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/posts\/51195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/comments?post=51195"}],"version-history":[{"count":0,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/posts\/51195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/media\/51197"}],"wp:attachment":[{"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/media?parent=51195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/categories?post=51195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptd.in\/id\/wp-json\/wp\/v2\/tags?post=51195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}