Coldcard firmware flaw tied to 1,816 Bitcoin leaving 5,200 addresses
A Coldcard firmware bug is linked to about 1,816 Bitcoin moving out of more than 5,200 addresses between July 30 and Aug. 4, worth roughly $116 million. Coinkite CEO Rodolfo Novak says a new AI model caught what human reviewers missed. Some Bitcoin developers are pushing back.
- Original source: tokenpost.com.
- The source published it on Nov 12, 2026 at 6:58 PM.
- No second outlet has reported it yet. Treat it as a single-source claim.
Roughly 1,816 Bitcoin walked out of more than 5,200 addresses between July 30 and Aug. 4, in transfers linked to a flaw in Coldcard's firmware. The coins were worth about $116 million at the time they moved.
Coinkite CEO Rodolfo Novak said a new AI model surfaced the vulnerability that human reviewers had missed. The flaw affects firmware version 4.0.1 and later and can bypass the hardware random-number generator. Novak said the code had gone through at least 15 reviews.
Not everyone accepts that account. Some Bitcoin developers disputed the finding, and James O'Beirne said he privately raised a concern about Coldcard's random-number generation back in May 2025.
A firmware update can close the hole on new devices, but it does nothing for seed phrases that already exist. Users caught by the flaw have to generate fresh ones.
TopicsColdcard · Coinkite · Rodolfo Novak · James O'Beirne · Bitcoin · BTC
Source: tokenpost.com
Written by Paparazzi with AI. Not financial advice.
More stories
- Web3 & Cryptocryptobriefing.com0viewsCFTC's Selig warns states: don't jail prediction market executives
- Web3 & Cryptoaltcoinbuzz.io0viewsBitcoin Slips Below $70K as $1.3B of Crypto Longs Get Wiped Out
- Web3 & Cryptox.com0viewsKraken parent Payward's Q3 earnings slide 67%, now at $60M
- Web3 & Cryptocryip.co0viewsTether's Rumble Loan Reveals a Stablecoin Giant Turned Direct Lender