A build error in Coldcard’s firmware drained $38 million in bitcoin in 25 minutes

Posted On August 1, 2026

Coinkite says an attacker used AI to find a flaw its own AI review missed, exposing 500 wallets to a seed generation bug that reduced 128 bits of entropy to 40. The attack took 25 minutes. At 2:14 a.m. UTC…