Hardware Wallet RNG Failures

Overview

Incidents where hardware-wallet firmware RNG/entropy bugs make seeds offline-enumerable, defeating air-gap assumptions.

Timeline

• 2026-07-30: coldcard drain ~1,083 BTC / ~$70M (2026-08-01-coldcard-firmware-rng-70m-bitcoin-drain)

Key Players

• coinkite
• coldcard
• block
• galaxy-research

Analysis

Scope disputes (which models) and loss-figure revisions (Galaxy vs early tallies) are as newsworthy as the root cause. User remediation is seed migration, not firmware-only.

Related Topics

• bitcoin-self-custody
• hardware-wallet-security