A firmware vulnerability in Coldcard led to the transfer of 1,816 BTC, resulting in a loss of $116 million.

Coinkite CEO Rodolfo Novak stated that an AI model discovered a vulnerability in Coldcard firmware versions 4.0.1 and later that could bypass the hardware random number generator. Between July 30th and August 4th, over 5,200 addresses lost approximately 1,816 BTC, worth about $116 million. James O'Beirne privately pointed out in May 2025 that Coldcard had an issue with random number generation. A firmware update fixed the problem on new devices but not on older mnemonic phrases; affected users needed to generate new ones. (Source: Bitcoin News)