Community Trust ScoreVerified 90 % Real Verified 10 votesA firmware flaw in Coldcard hardware wallets has cost holders more than $116 million since July 30. Coinkite has acknowledged the firmware bug dates back to March 2021, which means affected wallets sat exposed for years before anyone caught it. Hardware wallets exist precisely because people don’t trust exchanges or software wallets with large holdings. When that promise breaks — especially through a firmware bug sitting undetected for years — it rattles confidence in a way that goes beyond the dollar figure. A firmware bug in Coldcard devices made by Coinkite produced insufficient entropy in recovery seeds, leaving wallets open to brute-force attacks.