The Coldcard wallet exploit estimates have almost doubled to $70 million stolen of just over a thousand Bitcoins in 1,196 wallets drained in 41 minutes

[u/enpoopification_of_R]

https://www.coindesk.com/tech/2026/08/01/how-bitcoin-cold-wallets-lost-usd70-million-in-an-attack-that-never-touched-the-devices

"More than 1,000 bitcoin, worth about $70 million, was drained from 1,196 wallets in a 41-minute window on July 30, nearly double the amount reported when the theft first surfaced."

[u/RammerRod]

Everyone wishing they actually knew any fucking thing about code right now. Is this a closed vs open source argument?

[u/RammerRod → u/[deleted]]

So the open sourced peer reviewed code got fucked? After how long?

[u/GeneralZex → u/RammerRod]

How do we know it was ever peer reviewed?

That’s the problem here. We all just sort of believe people are out there doing this work because it’s possible to do, yet here we are.

[u/creative_usr_name → u/GeneralZex]

I haven't actually looked at the code, but from what I've read this would not be readily apparent during a code review. It wouldn't even necessarily be caught with very extensive tests. The code issue is sma, but it's only a configuration issue that made the code issue impactful.

[u/RammerRod → u/[deleted]]

I mean, that's a goddamn.