---
title: "Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/294564240.md"
description: "Galaxy Digital reports $70 million stolen from Coldcard Bitcoin wallets due to a firmware bug reducing randomness in recovery phrase generation. Coinkite, the manufacturer, apologized and released emergency updates (Mk3 v4.2.0+, Mk4/5 v5.6.0+, Q v1.5.0Q+) to fix the vulnerability. Users are urged to generate new recovery phrases on updated firmware and migrate funds, as existing seeds remain insecure."
datetime: "2026-08-01T00:06:51.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/294564240.md)
  - [en](https://longbridge.com/en/news/294564240.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/294564240.md)
generator: "portal-rs"
---

# Galaxy Digital Says $70,000,000 Drained From Bitcoin Holders in Coldcard Wallet Exploit

Researchers at Galaxy Digital say about $70 million has been stolen due to an exploit in the popular Bitcoin wallet Coldcard.

The attack was enabled by a firmware bug that dramatically reduced the randomness of how the wallet creates its secret recovery phrase.

According to Galaxy, the vast majority of the funds were stolen in less than an hour.

Coinkite, the company behind Coldcard, says it takes full accountability for the firmware bug and has apologized to affected users.

The company has released emergency firmware updates for all affected models: version 4.2.0 or later for Mk3, 5.6.0 or later for Mk4 and Mk5, and 1.5.0Q or later for the Coldcard Q.

These updates remove the vulnerable software fallback path and ensure new seeds use the intended hardware true random number generator.

Critically, a firmware update alone does not secure existing seeds. Users must generate an entirely new recovery phrase on the fixed firmware and migrate their BTC.

### Related Stocks

- [GBTC.US](https://longbridge.com/en/quote/GBTC.US.md)
- [HODL.US](https://longbridge.com/en/quote/HODL.US.md)
- [BTCO.US](https://longbridge.com/en/quote/BTCO.US.md)
- [FBTC.US](https://longbridge.com/en/quote/FBTC.US.md)
- [BRRR.US](https://longbridge.com/en/quote/BRRR.US.md)
- [BTCW.US](https://longbridge.com/en/quote/BTCW.US.md)
- [BITB.US](https://longbridge.com/en/quote/BITB.US.md)
- [IBIT.US](https://longbridge.com/en/quote/IBIT.US.md)
- [EZBC.US](https://longbridge.com/en/quote/EZBC.US.md)
- [ARKB.US](https://longbridge.com/en/quote/ARKB.US.md)
- [BITO.US](https://longbridge.com/en/quote/BITO.US.md)
- [03008.HK](https://longbridge.com/en/quote/03008.HK.md)
- [03042.HK](https://longbridge.com/en/quote/03042.HK.md)
- [03430.HK](https://longbridge.com/en/quote/03430.HK.md)
- [BTCE.DE](https://longbridge.com/en/quote/BTCE.DE.md)
- [GLXY.US](https://longbridge.com/en/quote/GLXY.US.md)
- [BRPHF.US](https://longbridge.com/en/quote/BRPHF.US.md)

## Related News & Research

- [Polygon CEO Triggers Crypto Community With Vacation Take and Schools Critics](https://longbridge.com/en/news/298116277.md)
- [Bybit upgrades Bitcoin staking vault with a 1.2% guaranteed return](https://longbridge.com/en/news/298058233.md)
- [Stocks in Play: Bitcoin Treasury Corporation](https://longbridge.com/en/news/298054044.md)
- [Metaplanet Buys 1,007 More Bitcoin As Treasury Hits 20,000 BTC](https://longbridge.com/en/news/297936992.md)
- [Hilbert Group shifts strategy to monetization, targets revenue growth after integration phase](https://longbridge.com/en/news/297739875.md)

---
> **Disclaimer: This article is for reference only and does not constitute any investment advice.**