$130 Million Gone Because the Randomness Was Predictable: Which Hardware Wallet You Can Still Buy

There are two kinds of bitcoin holder this week: the ones checking the price every morning, and the ones checking every morning whether their coins are still there. The reason is called Coldcard — and it is the most uncomfortable proof yet that the most respected hardware wallet is not automatically the safest one. Since 31 July 2026, consistent counts put the losses at more than $116 million in bitcoin drained from over 5,200 addresses; some tallies now reach roughly $130 million. The victims are not people who clicked a phishing link. They are people who did everything right: offline, cold storage, seed stamped in steel, never photographed. This article covers three things: which manufacturer you can still buy in good conscience, why track record beats any spec sheet, and why right now is precisely the wrong moment to pause your savings plan. What actually happened at Coldcard — in one paragraph The Coldcard, made by Canadian company Coinkite, has been the bitcoin-only wallet for advanced users for years. In firmware version 4.0.0, shipped since March 2021, the device bypassed its own dedicated hardware randomness chip when generating a seed phrase and used a predictable software...