<\/p>\n
Tim Lamb was vacationing in the Channel Islands with his family last week when news of the cryptocurrency hack reached him. He faced a quandary: whether to rush home and check on his Bitcoin, or finish the trip.<\/p>\n
He waited.<\/p>\n
By Saturday afternoon, his two Bitcoin, worth around $130 000, were gone.<\/p>\n
The 38-year-old marketer thought he had done everything right. His Bitcoin was in \u201ccold storage,\u201d protected by an offline hardware wallet called Coldcard made by Toronto-based Coinkite. The secret code for unlocking it had been stamped on a metal plate that was hidden inside a fake dictionary. But a software flaw in Coinkite\u2019s device still allowed bad actors to fleece investors of an estimated $130 million.<\/p>\n
\u201cIt was just such a big shock because I thought that was so secure,\u201d Lamb said in an interview.<\/p>\n
Read:
Hackers hit bitcoin\u2019s safest hiding place in ongoing attack
When a cold wallet isn\u2019t so cold: Lessons from the $90m bitcoin theft
Hacked bitcoin wallet maker warns AI failed to detect bug<\/p>\n
While it\u2019s not the first time investors have seen their tokens evaporate, Coinkite\u2019s days-long hack is further undermining confidence in an industry already facing pressure on multiple fronts. Bitcoin is mired in a prolonged downturn, gambling apps and prediction markets are edging into its turf, AI stocks are stealing its thunder and some committed cheerleaders are lowering their profile amid serious concerns about their physical safety.<\/p>\n<\/p>\n
Now, if the most secure treasure chest can be unlocked, is anything truly safe?<\/p>\n
ADVERTISEMENT<\/p>\n
CONTINUE READING BELOW<\/p>\n
\u201cThis one hits different because the people affected by it, from the optics of it, did the right thing,\u201d David Schwed, a crypto and digital asset security expert, said of the Coldcard hack. \u201cYou hear cold wallet and cold storage are the right thing and then their funds are gone.\u201d<\/p>\n
Digital crypto attacks have become more frequent this year, even as losses have declined. Hackers stole about $972 million in the first half of 2026, down from $2.3 billion a year earlier, though the 207 incidents recorded were the highest for any six-month period on record, according to TRM Labs.<\/p>\n
In an emailed statement, Coinkite\u00a0declined\u00a0to comment on loss figures reported by third-parties: \u201cWe\u2019re heads down helping affected customers,\u201d the company said.<\/p>\n
The company has been urging users to update the firmware of their devices and transfer their Bitcoin to new wallets. In a post on X Thursday, Coinkite pointed users to the Coldcard GitHub page to find the latest software.<\/p>\n
Secret codes<\/p>\n
For devoted Bitcoin buyers, there\u2019s a modus operandi that\u2019s long been advocated. They stockpile the cryptocurrency over months or years, hold onto it, and never sell \u2013 no matter what happens with short-term price swings. And the Bitcoin should be self-custodied: secured by a hardware wallet beyond the purview of governments and financial institutions, accessible only with secret codes that allow holders to access and transfer assets.<\/p>\n
Whether that\u2019s still the right way is\u00a0suddenly up for debate.<\/p>\n
\u201cIf you\u2019re simply looking for exposure to the asset class, there are better options than self-custody for most people,\u201d said Schwed. He likened it to holding cash: few people would keep $1 million in a home safe rather than a bank. Using regulated exchanges or buying exchange-traded funds that hold Bitcoin are other options, he said, noting that they have teams of security professionals.<\/p>\n
Of course, that strategy clashes with one of crypto\u2019s oldest principles: \u201cNot your keys, not your coins.\u201d In other words, someone doesn\u2019t really own Bitcoin unless that person is the only one in control of the credentials needed to access it.<\/p>\n
ADVERTISEMENT:<\/p>\n
CONTINUE READING BELOW<\/p>\n
Longtime crypto aficionados are quick to point out that there have also been numerous exchange failures, hacks and scandals far away from hardware wallets.<\/p>\n
\u201cWhat happened wasn\u2019t about cold storage,\u201d said Vincent Bouzon, director of product security at Ledger SAS, which manufactures its own product that competes with Coinkite\u2019s. \u201cIf the cryptography is correct, cold storage is still the best solution.\u201d<\/p>\n
Hardware wallets like Coldcard and other cold storage options don\u2019t actually store Bitcoin, they protect the private keys needed to authorize transactions.<\/p>\n
A bug in certain versions of Coinkite\u2019s firmware made some \u201cseed phrases\u201d used to generate those private keys more predictable than they should have been. As a result, hackers were able to guess some of the phrases and steal the Bitcoin controlled by affected wallets without needing to connect to the Coldcard devices.<\/p>\n
The company said on Tuesday it had used artificial intelligence to review critical codebases, but it failed to detect the vulnerability.<\/p>\n
Confidence eroding<\/p>\n
Perhaps more than anything, the Coinkite episode is yet another hit to confidence in a fragile industry full of risks.<\/p>\n
Bitcoin is down roughly half from its October peak, with no clear catalyst for recovery. The decline has triggered job cuts, business model revamps and losses for investors big and small. But that plunge in value hasn\u2019t stopped a growing number of thefts, including the violent and frightening wrench attacks.<\/p>\n
There were 52 such attacks worldwide in the first half of 2026, up 33% from the comparable period last year, according to blockchain security firm CertiK.<\/p>\n<\/p>\n
In one attempted wrench attack in Paris earlier this year, a crypto entrepreneur\u2019s neighbours heard noises during the night and alerted the family before the criminals could go through with their plan, said the entrepreneur, asking not to be named because of safety concerns. Afterward, the person conducted a comprehensive review of physical security, digital footprints, public information, home access, routines and travel patterns for everyone in the household.<\/p>\n
ADVERTISEMENT:<\/p>\n
CONTINUE READING BELOW<\/p>\n
\u201cThe most disturbing part was realising that this was not an abstract cyber risk, but a physical threat to my family, including our three very young children,\u201d the person said.<\/p>\n
Those with enough crypto wealth to be targeted typically have sophisticated security practices not just for their homes but for their holdings as well.<\/p>\n
They often split or \u201cshard\u201d a 24-word recovery seed phrase into multiple pieces, storing each fragment in a different hiding place. Some even use specialist vault providers to stash the pieces in high-security facilities located in different countries.<\/p>\n
For regular investors, those military-grade tactics are far out of reach.<\/p>\n
Christian McClure, a 31-year-old restaurant manager from Colorado, spent six years squirrelling away savings into Bitcoin. By early August, McClure was nearing his goal of owning one-tenth of a coin \u2013 a small amount, but a symbolic milestone for many Bitcoin faithful.<\/p>\n
In the blink of an eye, all of it was stolen in the Coinkite hack.<\/p>\n
\u201cIt\u2019s heartbreaking,\u201d McClure said of his approximately $6 000 loss. \u201cIt\u2019s not a massive amount of money. But it makes you feel violated, especially when you feel you did everything you were supposed to do.\u201d<\/p>\n
\u00a9 2026 Bloomberg<\/p>\n
#Hack #supposedly #safe #bitcoin #tool #faith #devoted<\/p>\n","protected":false},"excerpt":{"rendered":"
Tim Lamb was vacationing in the Channel Islands with his family last week when news…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[95,18987,12878,2280,11487,18986,2180],"_links":{"self":[{"href":"https:\/\/stock999.top\/index.php?rest_route=\/wp\/v2\/posts\/13189"}],"collection":[{"href":"https:\/\/stock999.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stock999.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stock999.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stock999.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13189"}],"version-history":[{"count":0,"href":"https:\/\/stock999.top\/index.php?rest_route=\/wp\/v2\/posts\/13189\/revisions"}],"wp:attachment":[{"href":"https:\/\/stock999.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stock999.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stock999.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}