An ongoing vulnerability in Coldcard hardware wallets, traced to a 2021 firmware flaw that made seed generation predictable, has drained roughly 1,816 BTC (≈$116M) from over 5,200 addresses across four attack waves. The cluster is still active as of August 4–5, and CryptoQuant says daily active BTC addresses spiked from ≈645,000 to nearly 1 million.
Matters because: Security-driven transfers can force sudden wallet migration and add short-term sell-side liquidity risk if panic deposits reach exchanges.