CoinKite, the maker of Coldcard hardware wallets, has halted all shipments and destroyed remaining inventory with vulnerable firmware after a coordinated cyberattack drained approximately 1,367.59 Bitcoin (BTC), worth $86.62 million at current prices. The breach exposes critical vulnerabilities in self-custody solutions, prompting urgent warnings for users to migrate funds immediately to prevent further exploitation.

The incident involves multiple waves of theft targeting the Coldcard wallet ecosystem. According to a live dashboard tracking the exploit, a total of 1,367.59 BTC has been siphoned from linked wallets. Alex Thorn, Head of Research at Galaxy Research, identified that hackers are launching a fourth coordinated attack. This latest wave has already pilfered 388.93 BTC, valued at $24.53 million, from 462 addresses across 218 transactions. Thorn alerted users on X on August 3, 2026, noting that pending transactions in the mempool indicate ongoing siphoning efforts.

Immediate Mitigation Steps

Coldcard confirmed the vulnerability on August 2, 2026, stating it halted shipments upon confirmation of the flaw. The company destroyed all remaining units with the affected firmware installed at its facilities. Customers who had already received orders were contacted directly via email with an advisory and migration steps. "Right now, our full focus is helping affected users migrate safely," Coldcard said.

Thorn urged users to move funds off the Coldcard wallet immediately, recommending high transaction fees to prioritize rescue transactions ahead of the attackers'. He warned that users whose addresses appear in the attack list have only minutes to engage in a fee race to secure their funds.

Industry Response and Risks

Binance co-founder Changpeng "CZ" Zhao highlighted the inherent risks of self-custody in response to the drains. On August 1, 2026, Zhao noted that bug fixes cannot retroactively secure previously generated wallets and that developers have no way to reach users on air-gapped devices. "I'm a believer in self-custody, but it puts the burden on you," Zhao said, emphasizing that wallets remain open to hackers until users manually intervene.

The incident underscores that hardware wallets, which store private keys offline to protect against malware, are not foolproof. Ledger, another major industry player, faced a sophisticated hacking incident in 2023 resulting in the theft of approximately $484,000 in assets. Benzinga reached out to CoinKite regarding safeguards, liability protections, or contingency measures planned following this incident.

Market Impact

At the time of writing, Bitcoin was trading at $63,071.73, down 0.40% in the last 24 hours, according to Benzinga Pro data. The breach raises broader concerns about security protocols in decentralized finance infrastructure.

What the Numbers Show

The concentration of losses in the fourth wave—accounting for nearly 29% of the total drained value ($24.53 million of $86.62 million)—suggests that attackers are actively exploiting the vulnerability in real-time rather than relying solely on initial access. The rapid succession of 218 transactions affecting 462 addresses indicates a highly automated script capable of identifying and draining compromised wallets faster than many users can react, highlighting the critical importance of immediate fee-racing mitigation strategies advised by researchers.

Leading cryptocurrencies edged higher on Sunday as investors reacted to President Donald Trump’s decision to hold off on planned military strikes against Iran. The market rally followed reports that Tehran and other Middle Eastern nations asked for a pause to facilitate a peace agreement. Bitcoin (BTC) led the recovery, gaining 0.56% to trade at $63,197.96, while Ethereum (ETH) climbed 1.12% to $1,870.96. The broader crypto market capitalization increased by 0.82% to reach $2.17 trillion.

The price movement coincided with a surge in traditional equity futures. Dow Jones Industrial Average Futures rose 205 points, or 0.39%, while S&P 500 Futures spiked 0.42% and Nasdaq 100 Futures rallied 0.65%. Despite the gains, nearly $150 million was liquidated from the cryptocurrency market in the preceding 24 hours, predominantly in bearish short positions, according to Coinglass data. Bitcoin’s open interest rose 0.31%, though retail and whale derivatives traders remained net long but trimmed their exposure compared to the previous day.

Market Performance Overview

Bitcoin wobbled within a range of $62,890 to $63,700, with trading volume surging 19% over the 24-hour period. Ethereum remained stuck within the $1,800 level, while XRP and Dogecoin traded in the green. Among smaller caps, Ethena (ENA) led gains with a 10.92% increase to $0.08882, followed by Humanity (H) up 10.49% to $0.07609 and MemeCore (M) rising 8.78% to $1.20.

Sentiment and Technical Outlook

Despite the price recovery, "Fear" sentiment prevailed in the market according to the Crypto Fear & Greed Index. On-chain analytics firm Santiment highlighted that Bitcoin recorded its lowest positive-to-negative commentary ratio across major social platforms since modern tracking began. The data showed just 0.58 bullish comments for every one bearish comment, a panic reading larger than peak war fears earlier in the year.

Michaël van de Poppe, a cryptocurrency analyst, noted record-low Bitcoin sentiment and high net negative positioning in the current cycle. He predicted that a sustained breakout above the $67,000-$68,000 resistance level would trigger a "strong and vital move" due to short liquidations, accelerating the upward trajectory.