More than 1,000 bitcoin was drained from 1,196 Coldcard wallets in a 41-minute window on July 30 after weak seed generation made private keys computationally searchable. Security researchers warn the episode challenges a core assumption of cold storage: that offline keys are not just unreachable, but effectively unguessable.
