← Back to Blog

[News Brief] Apr 22, morning | Coldcard Wallet Key Generation Vulnerability Causes Over $100 Million in Losses

More than $100 million in losses has been linked to insufficient randomness in the key generation process of Coldcard wallets. The incident has reignited debate over whether users should trust device-based random number generators or add their own entropy manually.

[News Brief] Apr 22, morning | Coldcard Wallet Key Generation Vulnerability Causes Over $100 Million in Losses

Bitcoin (BTC) holders have suffered more than $100 million in losses due to a key generation vulnerability in Coldcard wallets.

The incident was attributed to insufficient randomness in the wallet seed generation process. Decrypt reported that some Coldcard wallets generated seeds from a more limited set of combinations than expected, allowing attackers to brute-force possible combinations and discover private keys. A seed is the foundation from which all private keys in a wallet are derived, so exposure of the seed can give attackers access to funds. Entropy refers to the amount of randomness that makes a seed difficult to predict, and it is measured in bits. The lower the entropy, the fewer combinations an attacker must test. The incident has also reignited debate over whether users should trust a device's built-in random number generator or add their own randomness, such as through dice rolls. Coldcard offers features that allow users to add dice-roll entropy to seed generation or completely replace the device's random number generation method.

Strategy raised a total of $395.3 million through Bitcoin (BTC) sales and common stock issuance.

Part of the proceeds was used to repurchase STRC shares, while cash holdings increased to $4 billion. According to a filing submitted to the U.S. Securities and Exchange Commission (SEC), Strategy sold 1,638 BTC at an average price of $63,957, raising $104.7 million. It also issued 3,011,361 shares of common stock (MSTR), raising an additional $290.6 million. Strategy repurchased 912,143 STRC shares for $81.2 million. Its cash holdings expanded to $4 billion.

Samsung Electronics is reportedly pursuing plans to add native stablecoin functionality to as many as 800 million Galaxy smartphones.

Odaily reported that the feature is expected to be integrated into Galaxy Wallet. Native functionality would allow users to use stablecoins directly within the device's default environment without relying on a separate application. The supported stablecoins, target regions, and detailed rollout timeline have not been confirmed.

U.S. Senator Jon Husted urged the Senate to hold a vote on the CLARITY Act.

The Bitcoin Magazine X account posted a video on the 4th showing Husted saying, "We need to vote on this bill. We cannot keep stalling and delaying any longer." He stated that the Senate should not postpone the legislative process further.

FTX founder Sam Bankman-Fried's fraud appeal was rejected, leaving his 25-year prison sentence in place.

ABC News reported that the U.S. Court of Appeals for the Second Circuit in New York dismissed Bankman-Fried's appeal.

Brazilian crypto asset manager Hashdex will liquidate its U.S. spot Bitcoin (BTC) ETF later this month.

The ETF launched in the U.S. market in 2024 but struggled to attract assets. Decrypt reported that Hashdex is shutting down the fund and proceeding with liquidation.

Poolin's debt to wallet users has reached $163.7 million, and a proposed $52 million sale of Texas-based assets could collapse around next week's court hearing.

CryptoSlate reported that the buyer, Thor, will lose its due diligence rights before the court reviews the sale. As a result, the transaction could be withdrawn before judicial review takes place. The scope of assets recognized as belonging to Poolin and the repayment priority among creditors have also not been determined. How much wallet users will actually recover may remain uncertain even after next week's court hearing.

Nigeria's Securities and Exchange Commission (SEC) has approved the issuance and trading of tokenized versions of companies' traditional shares.

The related service is expected to begin in early September 2026. According to Bloomberg on the 5th, companies will be able to issue and trade tokenized stocks through the NASD OTC Securities Exchange, Nigeria's over-the-counter securities market. NASD plans to launch the service in early September 2026.

The U.S. state of Texas has made audits mandatory before data centers can connect to the power grid.

Crypto mining facilities will also be subject to the new requirement. Crypto Briefing reported that data centers must undergo an audit process before being connected to the grid.

RTX, a BSC-based memecoin, surged about sevenfold within one hour between 1:00 a.m. and 2:00 a.m. on the 5th.

According to GMGN data, the price spiked after claims spread that NVIDIA CEO Jensen Huang's X account had followed @TradeSager, a member of the RTX community.