Coinkite, the maker of Coldcard, disclosed that its systems were compromised in a cybersecurity incident that has impacted user funds. The company stated that the breach involves unauthorized activity targeting its infrastructure and customer data, with preliminary estimates indicating potential losses of more than $100 million in Bitcoin.
Officials from Coinkite indicated that the cadence of the investigation is ongoing and that they are cooperating with relevant authorities. The breach appears to involve at least one of the company’s primary platforms, though Coinkite did not specify the exact vector of the attack or the scope of user exposure in its initial statements.
Coldcard wallets, developed by Toronto-based Coinkite, are marketed as Bitcoin-only devices designed for secure offline storage. The company’s public communications have emphasized security features and the importance of safeguarding private keys. In light of the incident, Coinkite has urged users to monitor their wallets and consider security best practices while the investigation progresses.
Industry observers note that the theft, if confirmed, would represent a significant loss in the cryptocurrency security landscape, raising concerns about the resilience of hardware-wallet ecosystems and the efficiency of protective measures against intrusions into wallet providers’ ecosystems.
Coinkite did not provide a timeline for when users might expect resolution or a recovery plan. The company asked the community to await further updates as forensic work continues and legal processes proceed.
No individuals or specific entities have been named in connection with the breach in the public statements issued by Coinkite at this stage. Users with questions are advised to consult Coinkite’s official communications channels for guidance and official remediation steps. Further updates are anticipated as the investigation unfolds.
