AI-Fueled Coldcard Exploit Exposes Self-Custody Weakness, With Losses Tracking Toward $114M

The most important story in crypto right now isn’t price—it’s entropy. A latent firmware bug in Coldcard wallets, likely uncovered and operationalized with AI, turned “offline” into “unguarded,” and it’s still unfolding.

Here’s the failure path. A March 2021 firmware release occasionally sourced wallet seeds from a weak software fallback instead of the hardware RNG. That collapsed an Mk3’s effective key strength to roughly 40 bits from the intended 128. With that reduction, keys became guessable at scale, which explains why coins that never touched the internet are being swept today. One Canadian user kept keys in a safety deposit box and still lost 18.25 BTC. Offline is not the same as unguessable.

Researchers are mapping the drain as it spreads. Galaxy Research now tracks roughly 1,367 BTC across 4,585 addresses—about $88.6 million—moving in three waves, with a fourth wave flagged over the weekend that could lift losses toward $114 million. Galaxy warns the exploit remains active and expects every vulnerable device to be emptied unless owners move first; about 600 suspected attacker addresses have reportedly been handed to federal investigators. Some late-stage thefts may still be front‑run in the mempool—if you act before the attacker’s settlement confirms.

Coldcard’s maker, Coinkite, says it has to assume an attacker used AI to scan its open-source codebase; an internal AI pass weeks earlier “did not find this bug or anything serious.” Galaxy’s Alex Thorn noted the sweeps look programmatic and were probably orchestrated with a large language model. The symmetry here matters: attackers and defenders increasingly wield the same accelerants, but incentives favor the first mover who automates triage, exploit synthesis, and transaction orchestration.

This isn’t a referendum on open source; it’s a reminder that transparency without entropy guarantees is brittle. Air-gapping reduces remote attack surface, but it cannot compensate for weak randomness. If you ship firmware that can fall back to a low‑grade source, you’ve created a lottery adversaries can run faster than you can patch. AI just widens that speed gap.

What should change: - Seed generation must enforce strong entropy and fail closed—no silent fallbacks. Add n-of-k entropy mixing (hardware RNG + user dice + external source), with verifiable attestations. - Detect and quarantine weak seeds on-device. If a derivation pattern maps to the vulnerable range, force regeneration and on-device migration. - Make reproducible builds and formal verification table stakes for critical paths (RNG, seed handling, PSBT signing). Don’t trust a single AI code scan; fold LLMs into continuous fuzzing and property testing. - Build “break-glass” response playbooks: on-chain heuristics to pre-position replacement UTXOs, templated PSBTs, and mempool acceleration to front-run active sweeps. - Communicate with precision: publish affected models, firmware versions, serial ranges, and migration steps. Many users feel they “did everything right”; they need clear paths, not platitudes.

This past week underscored the broader backdrop: an AI model cracked a post‑quantum cryptography candidate that humans couldn’t, there were reports of OpenAI systems escaping a sandbox to hit external servers, and now an LLM‑assisted scan appears to have enabled a nine‑figure self‑custody drain. AI isn’t “the enemy,” but it is the new force multiplier for offense. Defensive engineering has to assume adversaries can read, reason about, and simulate your system faster than your team can hold a code review.

Markets and flows - Majors: BTC -1% to $62.6k; ETH -1% to $1,840; SOL -1% to $72.30; HYPE +3% to $52.90. ALGO +7%, HYPE +3%, ENA +4%. - Macro: Oil -6% to $79.50; Gold flat near $4,100. Futures green on Iran peace chatter: Dow +1%, Nasdaq +0.35%. Solana printed a 10th straight red monthly candle on July 31. - Security posture: BitGo CEO Mike Belshe publicly challenged Anthropic to hack a real wallet, posting a BitGo address with 100 BTC rather than debating “AI monster” demos. - Balance sheets: Tether Q2 net operating profit $1.5B (nearly +50% vs Q1); USDT float $184.6B; reserve surplus >$4B; gold >146 metric tons. Eric Trump’s American Bitcoin lost $57.2M in Q2; holdings at 8,002 BTC. Strategy sold $105M in Bitcoin to fund preferred dividends and an STRC buyback. - Policy and infra: Circle won a NYDFS trust charter, adding a New York trust company license weeks after a federal national trust bank approval. Bithumb targets an IPO in 2028. - ETFs: US Bitcoin ETFs saw -$265M net outflows Friday; -$60M on the week. ETH ETFs +$9M Friday; +$11M weekly. - Onchain activity: DEX volumes hit 24% of CEX in July (record). Polymarket and Kalshi reached $50B volume in July (ATH). New launchpad Flap surpassed Pons in daily launches Sunday. - Memecoins: DOGE -1%, SHIB -3%, PEPE -1%, PENGU -1%, TRUMP +1%, BONK -3%. Robinhood chain: FRONG +84%, Cashcat +20%; Stonkbroker briefly touched $50M before retracing. Solana: CATE +130%, Manifet +69%, Kimchi +700%; ANSEM -11% at $190M. - NFTs: Punks 32.3 ETH; BAYC 8.16 ETH; Pudgy 3.86 ETH. Stonkbrokers climbed to 6.9 ETH. Pitboys +43%, Monkeyhood +200%.

Self-custody isn’t broken; it’s being stress‑tested by faster adversaries. “Cold” now has to mean cryptographically unassailable, not just offline. Design like your attacker is an AI with root access to your repo—and a stopwatch.