Bitcoin (BTC) Coldcard Bug Drains More Than 1,300 BTC

Bitcoin News

A security failure in Coldcard hardware has forced Bitcoin (BTC) users to reassess self-custody after a firmware flaw produced weak private keys. The incident began last week and remains active, meaning holders who have not moved funds may still be exposed. Available estimates indicate that more than 11,000 BTC were transferred to custodial exchanges as users abandoned one of the sector's most widely used hardware wallets. Thefts have exceeded 1,300 BTC, while higher estimates place the total near 2,000 BTC. The failure is particularly damaging because Coldcard was built around cautious design choices: air-gapped operation, simple LED displays, NFC transfer methods, and the BBQR protocol were all intended to reduce attack surfaces. The attackers did not need a sophisticated physical exploit. Instead, they targeted entropy, the randomness required to create keys that are mathematically difficult to guess. A long-running firmware bug reportedly produced insufficient randomness, making some generated private keys easier to infer. That flaw stayed hidden for years while the device gained popularity. The episode also revives the original argument that Bitcoin was designed to avoid trusted third parties, not to depend on them. For the Bitcoin community, the debate now centers on whether the correct response is a return to centralized custody or a push toward stronger key-management practices, including multisignature setups and better firmware verification.

Bitcoin's price structure remains compressed in a consolidation zone, with the market trading around $63,500 and still unable to clear the $67,000 resistance area. On the daily chart, the asset sits below its declining 100-day and 200-day moving averages, located near $68,000 and $70,000, a configuration that keeps the broader bear market bias intact. Momentum is neutral, with the relative strength index hovering close to 50, suggesting neither buyers nor sellers have decisive control. The first major demand zone is near $60,000, where previous dips attracted accumulation, while a deeper breakdown would open the path toward $54,000. Shorter timeframes show a slightly firmer picture. BTC has defended $62,000 several times and is now stabilizing around a $63,000 fair-value gap, a price imbalance that often acts as short-term support. If that short-term support holds, another rotation toward $66,000 remains possible. Repeated rejection near the upper range boundary, however, would reinforce the current pattern and raise the odds of another test of lower demand. The Coinbase Premium Index remains negative near -0.08, signaling that U.S. spot demand has not returned with conviction. Our desk reads this as a market waiting for a catalyst: the technicals do not confirm a durable recovery, but they also do not yet signal a decisive breakdown. Until $67,000 is reclaimed, range trading remains the base case.

In the industrial layer of the Bitcoin economy, Bitdeer is shifting more capacity toward artificial intelligence infrastructure. The company said its subsidiary Tydal Data Center AS signed a 16-year hosting and services agreement with Volta Tydal AS for a Norwegian AI and high-performance computing park. The facility is expected to provide 121 megawatts of information-technology load, roughly 133 megawatts in total power, and will be fully equipped with NVIDIA graphics processors to serve a major AI laboratory. Base contract payments over the initial term are projected at about $4.7 billion, while an eight-year renewal option could lift the potential total value to around $8 billion. Bitdeer expects remaining capital expenditure of approximately $500 million and plans to fund that portion through new debt. The agreement also underscores how compute demand from AI can absorb infrastructure originally built for crypto production. The announcement is notable because it extends the strategy once associated mainly with ASIC mining: monetizing power, data-center expertise, and grid access beyond block rewards. Following the disclosure, Bitdeer shares listed under the ticker BTDR rose as much as 23%. For BTC markets, such moves matter less as direct price drivers and more as evidence that listed miners are diversifying revenue streams.

COINOTAG's analysis: these developments show Bitcoin's maturation is occurring on three fronts: custody security, price structure, and infrastructure diversification. The Coldcard incident proves that self-custody risk is now technical, not ideological. The chart shows range-bound behavior until resistance clears. The Bitdeer announcement, a company disclosure, confirms long-term AI hosting revenue can enter the mining economy. Taken together, the market is not simply reacting to headlines; it is repricing operational resilience. The primary record supports that view: Coinbase's published premium data remains negative, and Bitdeer's corporate disclosure confirms the Norway contract terms rather than speculation. Until custody safeguards improve and spot demand returns, any move toward a new all-time-high remains conditional.