CZ Warns Bitcoin Holders After $70 Million Wallet Exploit: 'Nothing Is 100%'

A significant security breach involving Coldcard hardware wallets has resulted in a substantial theft of Bitcoin. According to reporting from The Hacker News, a flaw in the hardware wallet enabled a theft of $70 million in Bitcoin, which was executed within a 41-minute window. The scale of the incident continued to escalate quickly, with thestreet.com reporting that the hack grew to $75 million. Most recently, CoinDesk has indicated that the attack expanded to affect 4,500 addresses, with total losses approaching $89 million. These events have highlighted a critical vulnerability in what were previously considered secure cold-storage solutions. Coverage from multiple outlets emphasizes the systemic risk posed by this exploit.

Decrypt reports that CZ has issued a warning to Bitcoin holders following the $70 million exploit, stating that "nothing is 100%." The focus across these reports is on the speed and scale of the drainage. While The Hacker News concentrates on the technical timeframe of the initial theft, CoinDesk provides a broader view of the contagion, noting the thousands of addresses now compromised. This coordinated reporting underscores a sudden shift in the perceived safety of hardware-based cold storage for cryptocurrency assets. Contextual reports from Bitcoin Magazine suggest that this event represents a new reality for the industry, noting that AI is now auditing every open-source wallet. This specific bug in Coldcard suggests that automated tools are being used to identify vulnerabilities in open-source code at a scale previously unseen. The transition from a single exploit to a widespread attack affecting thousands of addresses illustrates the danger of a shared flaw in a popular hardware device.

This environment of AI-driven auditing makes the security of open-source wallets a primary concern for the global Bitcoin community. Future developments to watch include the official response from Coldcard regarding the hardware flaw and potential updates to secure the affected 4,500 addresses mentioned by CoinDesk. Because thestreet.com urged users to notify others of the growing losses, there is an expectation of further user migration or emergency security patches. The industry will likely monitor if more addresses are compromised as the total loss figure moves toward or surpasses the $89 million mark. The ongoing interaction between AI auditing and open-source wallet security remains a central point of concern for analysts and holders.