Galaxy Research linked a years-old bug in Coldcard's firmware to over $115M in stolen funds. The firm's head of research said the attack is still ongoing.
Matters because: It could pressure confidence in hardware wallet security and increase scrutiny of self-custody tools.