$115M in Bitcoin Is Gone, and Your Cold Storage Setup May Not Be as Safe as You Think
$115 million in Bitcoin has been confirmed stolen in a hack tied to Coldcard, according to fresh figures from Galaxy Digital Research, and the crypto security playbook just got torn up.
Coldcard has long been the gold standard for Bitcoin self-custody. Hardware wallet maximalists swore by it. "Not your keys, not your coins" crowd recommended it in every beginner thread. That reputation is now under a microscope.
What Galaxy's Numbers Tell Us
Galaxy Digital's research team put the confirmed loss figure at $115 million in BTC. That is not a rounding error. That is not a DeFi exploit on a sketchy new protocol nobody audited. This is a nine-figure loss tied to a device category that bitcoiners have treated as the final word in security.
Details on the exact attack vector are still emerging, but the scale alone signals this is not a one-off edge case. When losses at this level hit hardware wallet users, it forces a sector-wide conversation about whether the assumed safety of cold storage has been overstated.
Why This Hits Different Than a CEX Hack
Exchange hacks, as brutal as they are, carry a familiar lesson: don't leave coins on exchanges. The community absorbs the story, points to the lesson, and moves on.
This is different. The entire argument for self-custody rests on the idea that removing your Bitcoin from exchanges and into a hardware wallet makes you untouchable. A $115 million breach tied to Coldcard does not just hurt one company. It plants doubt in the core security narrative that drives Bitcoin adoption among serious holders.
If the attack exploited a firmware vulnerability, a supply chain weakness, or a social engineering layer, each answer carries completely different implications for the estimated tens of millions of hardware wallets currently in circulation worldwide.
What Crypto Holders Should Do Right Now
Do not panic sell. Do not move coins unnecessarily, as that creates its own risks during a period of uncertainty.
Do check the Coldcard official channels and Galaxy Digital's full research report for the confirmed attack vector the moment it drops. That detail changes everything about how exposed you actually are.
If you are running older Coldcard firmware, treat an update with extreme caution until the exploit method is publicly confirmed. Updating blindly during an active investigation has burned people before.
Watch Bitcoin on-chain data over the next 48 hours. A hack of this size means stolen coins will eventually move. Blockchain analytics firms will flag those wallet clusters, and that movement could create short-term price pressure.
The self-custody conversation in Bitcoin just got a lot more complicated. Pay attention.