Coinkite declines to estimate Bitcoin loss from $130M Coldcard hack

Coinkite, the Toronto-based company behind the Coldcard hardware wallet, is refusing to put a number on how much Bitcoin was stolen through a critical firmware vulnerability. Independent researchers peg the damage at roughly 2,055 BTC, or about $130 million, spread across more than 7,300 compromised addresses. The company has instead pointed journalists and victims toward third-party assessments. When your product’s entire selling point is “your keys, your coins, maximum security,” declining to quantify the fallout from a breach is a bold strategy. What happened and how fast it unraveled The attack began on July 30, 2026, and escalated with terrifying speed. In the initial wave, attackers drained more than 1,082 BTC in approximately 41 minutes. That is roughly $68 million worth of Bitcoin disappearing faster than most people can finish a lunch break. Additional waves of theft continued through August 3, as attackers exploited the same vulnerability across a wider pool of affected wallets. By early August, 73 victims had contacted Galaxy Research, which has been independently tracking and evaluating the scope of the damage. The root cause is a flaw in the random number generator use...