← Back to Blog

[News Brief] Apr 22, morning | Ongoing Attacks on Coldcard Hardware Wallets Prompt Calls for Stronger Security

Coldcard hardware wallets continue to face attacks from smaller actors and copycats, prompting renewed calls for users to strengthen their security. Alex Thorn, Head of Research at Galaxy, advised users not to rely on single-signature wallets without dice-generated entropy and passphrase protection.

[News Brief] Apr 22, morning | Ongoing Attacks on Coldcard Hardware Wallets Prompt Calls for Stronger Security

Attack incidents targeting the Coldcard hardware wallet continue to spread.

In addition to the original attackers, smaller actors and copycats have reportedly emerged. BlockBeats reported that the Coldcard wallet attack incident is still ongoing and that additional small-scale attackers and imitators have appeared. Specific details, including the scale of the damage, the attack methods, and whether Coldcard has issued an official response, have not been confirmed.

Alex Thorn, Head of Research at Galaxy, reiterated warnings about security risks involving the Coldcard hardware wallet.

He said that any single-signature wallet using Coldcard firmware released after March 17, 2021 should be moved immediately to another wallet if the seed was not strengthened with dice-roll entropy and no passphrase was set. PANews reported this on Aug. 2, citing Thorn’s post on X (formerly Twitter). Thorn said the risk could be narrowed further, but recommended fully exiting the Coldcard ecosystem unless the wallet used a high-entropy seed from another source or the seed security was reinforced with a sufficient amount of dice-generated entropy. He added that attackers are continuing to identify wallet addresses that match the vulnerable conditions and drain their assets. Users who used high-quality external randomness or sufficiently randomized their seeds with dice are considered relatively lower risk, but affected users should not wait for an attack to occur and should complete asset transfers in advance.

Claims have emerged that the U.S. Senate has five days left to pass the Crypto Clarity Act before its summer recess.

Watcher.Guru, an X account covering digital asset news, said on Aug. 2 that only five days remain for the Senate to act on the Crypto Clarity Act before entering its summer recess. However, the post did not include specifics such as the bill’s provisions or a detailed voting schedule.

Trump Media & Technology Group (DJT) sold 2,628 Bitcoin and recorded a loss of $145 million.

The sale proceeds were reportedly $165.07 million. AmbCrypto reported that, in connection with this sale, the aggregate losses of corporate Bitcoin holders have reached $49 billion from the 2025 peak. The exact timing and reason for Trump Media’s sale were not confirmed.

Trump Media & Technology Group (DJT) additionally sold 2,628 Bitcoin through Crypto.com.

Following the sale, the company’s Bitcoin holdings were reduced to 4,261 BTC. Cointelegraph reported that, including this transaction, Trump Media has sold a cumulative 7,281 BTC over the past seven months.

About $330 million in positions were liquidated across the global digital asset derivatives market over the past 24 hours.

Of that total, long-position liquidations amounted to about $232 million, accounting for more than 70%. Foresight News reported the figures. The remaining roughly $98 million came from short-position liquidations. Liquidation refers to the forced closure of positions by exchanges when margin becomes insufficient in futures or margin trading.

Major cryptocurrency exchanges such as Coinbase and Binance are expanding into traditional finance by offering perpetual futures linked to stocks, indexes, and commodities.

Trading volume in these products reached $1.32 trillion from January through May this year. CoinDesk reported that stock-linked perpetual futures allow traders to gain 24/7 exposure to assets such as the S&P 500 without actually holding the underlying shares or receiving shareholder rights, targeting both institutions seeking low-friction trading and retail investors looking for easier access. Major platforms including Coinbase and Binance are building an “everything exchange” model that integrates crypto, equities, and derivatives into a single account. This reportedly also includes plans to use tokenized stock positions as collateral. However, large funds remain cautious about using decentralized exchanges.

Trading volume in perpetual futures based on traditional assets such as stocks, indexes, and commodities on crypto exchanges reached $1.32 trillion from January to May this year.

This already exceeds the full-year 2025 trading volume of $104.21 billion. CoinDesk, citing data from market data provider CoinGecko, reported the figures. Monthly volume rose from $230 million in January 2025 to $347.17 billion in May 2026. The industry refers to this trend as “reverse bridging.” While Wall Street capital had previously flowed into crypto markets through ETFs, custody products, and funds, crypto exchanges are now drawing traditional financial assets such as stocks, indexes, and commodities into on-chain trading systems via perpetual futures. Major crypto exchanges including Coinbase and Binance are building a “super exchange” model where crypto assets, equities, commodities, and tokenized assets can all be traded on a single platform.

Bitcoin-holding company Strategy posted an $8.2 billion loss in the second quarter, while Coinbase revenue fell 19%.

CryptoPotato reported that despite the quarterly loss, Strategy continued increasing its Bitcoin holdings and reducing outstanding convertible debt. The results highlighted both expanding Bitcoin holdings and slowing exchange revenue in the same quarter. Additional confirmation is needed regarding the drivers of Strategy’s loss and the reasons behind Coinbase’s revenue decline.

A contributor involved in Dogecoin development warned Coldcard hardware wallet users to take urgent action to protect their funds.

U.Today reported that the contributor urged Coldcard wallet users to immediately take steps to safeguard their assets from risk. However, the report did not specify the exact nature of the threat or the detailed protective measures being recommended.