Hackers are back in the crypto-sphere, and this time, they have targeted the holy of holies. More than 100 million dollars taken away in a few hours, and above all, a psychological shock wave that is beyond comprehension. The Coldcard breach has shaken confidence in self-custody, this sacred pillar of Bitcoin philosophy. A cruel paradox: the safest wallet handed over its keys to hackers. The network had not experienced such an earthquake in years.
In brief
- Nearly a million Bitcoin addresses were activated on July 31, a record not seen since December 2024.
- The flaw in Coldcard’s random generator enabled the theft of more than $100 million.
- Hackers made off with $70 million in just 41 minutes, exploiting keys with 40 bits of entropy.
- Panic overtakes FTX, Mt. Gox and COVID-19 crises, shaking confidence in self-custody.
967,546 active addresses: the rude awakening of the Bitcoin network
On July 31, 2026, the Bitcoin network experienced a day unlike any other in its recent history. 967,546 addresses woke up in twenty-four hours, a level not seen since December 2024 which is close to the symbolic million. The monthly average for July was around 627,061 addresses, which places the jump at 54%. A surge of fever that shook the miners to the depths of their data centers.
At the same time, bitcoins on exchanges climbed by 22,135 BTC in five days, going from 2,654,863 to 2,676,998. Holders fled like rats leaving a sinking ship, taking their digital savings to shores that they hope are safer.
“ This is fear-driven on-chain activity. Holders migrating their seeds and deploying their funds to alternative custody reflect an operational security response, not a change in belief », analyzes Glassnode.
Fear in Crypto: A Level Beyond FTX and COVID
The crypto-sphere had never experienced such a wave of pessimism in all its tumultuous existence. Santiment measured 0.58 positive comments for every negative comment on social media, a fear record that beats all previous ones. Not even the FTX collapse, the Mt. Gox trauma, and the COVID-19 crash reached this level of collective dismay.
“ Self-custody is over “, tweeted one user, summarizing themindset ambient with a disarming brutality.
Previous crises hit centralized exchanges, these large marketplaces where user funds lay dormant in the custody of others. This affects self-custody itself, the essence of the Bitcoin promise.
Jonathan Goodman, one of the many victims of the breach, saw his three wallets emptied in seven minutes flat:
As soon as it loaded I knew I was screwed because I saw red lines for withdrawals.
The fear is there, visceral, and it will not disappear with a simple click.
100 million in 41 minutes: the crypto heist of the century
The first sweep took place on July 30, in four consecutive blocks which left their mark. 594.5 BTC disappeared in a flash, as if sucked into a digital black hole. The coordinated operation lasted exactly 41 minutes to take away $70 million, a performance worthy of the greatest heists.
Galaxy Research lists 1,596 confirmed stolen BTCs, and 2,055 BTC when including suspected ones, bringing the total to around $130 million.
There fault at the origin of this disaster is almost ridiculous in its simplicity. An #ifndef directive disabled the Coldcard’s hardware random generator, reducing the entropy from 128 bits to 40 bits on older models.
Coinkite suspects the attackers used AI to discover the flaw in public code.
We have to assume that someone used AI to review older versions of our firmware and discovered this problem.
Eight years of careful audits, a microscopic compilation error, and suddenly, the vampire ball begins.
Key figures of the Coldcard panic
- BTC price at time of writing: $64,806
- Active addresses: 967,546 (+54%)
- BTC stolen: 1,596 confirmed
- Biggest loss: 29.9 BTC
- Duration of attack: 41 minutes
Bitcoin resists, but will self-custody survive?
Bitcoin is holding strong, despite the turmoil that is shaking its most intimate foundations. Its price oscillates between 62,000 and 65,000 dollars, as if nothing had happened, indifferent to the surrounding panic. But trust is in pieces, reduced to dust by the merciless workings of failing cryptography.
“Coldcard shows that self-custody shifts risk, it does not eliminate it “, warns Ari Redbord of TRM Labs with chilling lucidity. “ This Exposes the Pretense of Your Crypto Offline », adds Aneirin Flynn from Failsafe, driving the point home.
Irony of fate: centralized crypto exchanges, these sworn enemies of die-hard bitcoiners, could well benefit from this generalized distrust. Will self-custody survive this ordeal, or will we see a strong comeback of centralized custody?
Crypto platforms and wallets were the first victims of this wave. But the Bitcoin network itself is not immune to future threats. Quantum computing, which is getting dangerously close, could break all 85 recently identified critical flaws. Absolute security does not exist.
Maximize your Tremplin.io experience with our ‘Read to Earn’ program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.
