Thousands of bitcoin holders are racing to move funds off a flawed hardware wallet, and MARA Foundation just made it easier. The foundation, part of Nasdaq-listed bitcoin miner and AI infrastructure provider MARA Holdings, has opened its Slipstream service to the public with no signup code required. The move comes as users of the Coldcard wallet — identified in the article title — face an urgent need to transfer their coins to safer storage.
What Slipstream does
Slipstream is a service that helps bitcoin holders move funds from wallets that are compromised or otherwise risky. Until now, access required a signup code, which limited who could use it. By dropping that requirement, MARA is effectively throwing the doors open to anyone who needs to get bitcoin out of a Coldcard quickly. The timing isn't great for Coldcard owners, but it's a clear signal that MARA sees the situation as serious enough to remove barriers.
Why the rush
The exact flaw in the Coldcard wallet hasn't been detailed in the facts, but the scale of the response — thousands of users moving funds — suggests a vulnerability that can't wait for a standard patch cycle. Coldcard is a popular hardware wallet among security-conscious bitcoiners, so a widespread flaw creates a lot of pressure. MARA's Slipstream offers a way to broadcast transactions from a compromised device without exposing private keys to a connected computer, which is exactly the kind of tool needed in a panic.
MARA's broader play
MARA Holdings, formerly known simply as MARA, is best known for mining bitcoin and building AI infrastructure. The Slipstream service is a newer offering that positions the company as more than just a miner — it's also a service provider for the bitcoin ecosystem. Opening it to the public without a code is a practical move, but it also builds goodwill and brand recognition among the very people who might later use MARA's other products.
What happens now
Coldcard users who haven't moved yet are running out of time. The flaw isn't going away, and the longer they wait, the higher the risk of loss. MARA's Slipstream is live and accessible, but it's not a cure-all — users still need to follow the correct procedure to extract their funds safely. The next few days will show whether the service can handle the surge, and whether Coldcard issues a statement or a fix of its own.
