Coldcard Hack Triggers Security Overhaul for Self-Custody Users

Coldcard Hack Triggers Security Overhaul for Self-Custody Users

The recent Coldcard hack has led to a significant reassessment of security practices among bitcoin holders. This incident was fueled by a vulnerability in the wallet’s firmware that had remained undetected for five years.

Details of the Incident

Swan Bitcoin CEO Cory Klippsten was alerted to the situation while attending a wedding in Paris. “It was a brutal weekend for so many who lost bitcoin,” he recalled. The attack began last Thursday, with hackers exploiting a flaw in a firmware update from March 2021, which compromised the security of users’ private keys.

As the attack unfolded, nearly 1,600 BTC, valued at over $100 million, were siphoned from approximately 7,300 addresses, according to data from Galaxy Research. In response, Swan paused withdrawals for affected clients, implemented in-app warnings, and expanded support for any bitcoin users seeking assistance.

Community Response and Changes

Despite the severity of the breach, Klippsten noted that it has not deterred clients from self-custody. Instead, many are exploring solutions to fortify their security. He remarked, “People are moving into Swan Vault right now,” highlighting the firm’s collaborative multisig product designed to enhance security against single-point failures.

Outlook After the Hack

As of today, almost 90% of the stolen coins remain inactive on the blockchain, and the addresses linked to the attackers have been shared with U.S. federal law enforcement. Coinkite has addressed the exploit by patching all affected devices. Moreover, a volunteer team funded by OpenSats conducted a thorough scan of over 150 open-source repositories, which confirmed that the issue was isolated to Coldcard.

While the incident has prompted discussions about the viability of self-custody, calling into question whether many should reconsider their strategies, Klippsten remains optimistic. He stated, “It is awful that people lost coins, yet Bitcoin is antifragile, and the tools are getting stronger by the hour. This might end up being the best thing that ever happened to self-custody.”