Coldcard has confirmed that a security flaw behind roughly $114 million in losses remains live, with specific hardware wallet models and firmware versions still exposed. The company acknowledged the vulnerability in a statement, but did not disclose a timeline for a fix or a full list of affected devices.
The flaw and the losses
The flaw has been tied to approximately $114 million in losses, though Coldcard did not detail how the money was stolen or over what period. The company said the issue is still active, meaning users of the affected hardware wallets remain at risk. Coldcard, a maker of cryptocurrency hardware wallets, has not released a patch or recall as of this writing.
Which models are affected
Coldcard confirmed that specific models and firmware versions are vulnerable, but has not publicly named them. The company urged users to check their devices through official channels. Without a public list, many customers may not know if their wallet is exposed.
What users should do
Coldcard advised users to monitor its website and support pages for updates. The company has not said whether it will issue a firmware update or recommend replacing affected hardware. The ongoing exposure leaves a question mark over how quickly the company can respond to a flaw that has already cost users millions.
