Bitcoin active addresses jumped to 980,000 this week after a Coldcard firmware exploit drained up to $100 million from users. The incident, which targeted the popular hardware wallet, has renewed concerns about self-custody security and could accelerate a shift toward institutional-grade, regulated storage solutions.
Coldcard firmware exploit details
The exploit took advantage of a vulnerability in Coldcard's firmware, allowing attackers to siphon funds from affected devices. While the exact number of victims remains unclear, the total losses are estimated at up to $100 million. Coldcard has since released a patch, but the damage highlights the risks inherent in even the most trusted hardware wallets.
Bitcoin active addresses spike
On-chain data shows Bitcoin active addresses hit 980,000 shortly after news of the exploit broke. The surge likely reflects a combination of users moving funds off compromised devices, panic transactions, and broader market activity. The spike is notable — it's the highest level in months — and suggests a significant number of users are reacting to the breach in real time.
Shift toward regulated custody
The exploit underscores a persistent tension in crypto: self-custody offers control but comes with technical risk. For many, the Coldcard incident may be the final push toward regulated custody solutions — services that offer insurance, audits, and legal recourse. Exchanges and custodians like Coinbase Custody and BitGo have seen increased inquiries this week, though exact figures aren't public. The timing isn't great for the self-custody narrative, which has long argued that hardware wallets are the safest option.
What happens next depends on how many users update their firmware — and how many decide the trade-off isn't worth it. Coldcard has posted a security advisory, but the broader industry is watching to see if this becomes a turning point for custody preferences.
