Funds in some coldcards are getting partially swept.
No cause for concern or hyperbole at the moment. Can wait till more details emerge before considering actions. But for the prudent, here are some threads to follow:
1. Rob Hamilton, CEO of AnchorWatch
•Preliminary analysis:
https://x.com/Rob1Ham/status/2082896614218203616
•Also mentions that only 4% of addresses were reused:
https://x.com/Rob1Ham/status/2082902437543678255
2. NVK, head of Coinkite, maker of Coldcard
•'No support or security emails to us related to this, only hear say and the Reddit mess.'
https://x.com/nvk/status/2082902502169510263
•Like many, he also speculates that it is a result of bad entropy:
https://x.com/nvk/status/2082891656676700344
3. Jameson Lopp, CSO of Casa:
•Friends say only a few UTXOs were swept and not all.
https://x.com/lopp/status/2082894501018767693
•Also says the swept UTXOs are not that old:
https://x.com/lopp/status/2082914565646413879
4. Kevin Loec, CEO of Wizardsardine, maker of Liana wallet:
•His hypothesis based on what he knows so far:
https://x.com/KLoaec/status/2082926304995762209
sachin
npub1xn…43qnl
2026-07-30 20:57:40 UTC
Author Public Key
npub1xnc64f432zx7pw4n7zrvf02mh4a4p7zej3gude52e92leqmw8ntqd43qnlSeen on
wss://nos.lolPublished at
2026-07-30 20:57:40 UTCEvent JSON
{
"id": "27098dc7c37524067413ed5f89f270c41820778b451e94da57e6e16dc700c433",
"pubkey": "34f1aaa6b1508de0bab3f086c4bd5bbd7b50f8599451c6e68ac955fc836e3cd6",
"created_at": 1785445060,
"kind": 1,
"tags": [
[
"r",
"https://x.com/Rob1Ham/status/2082896614218203616"
],
[
"r",
"https://x.com/nvk/status/2082902502169510263"
],
[
"r",
"https://x.com/lopp/status/2082894501018767693"
],
[
"r",
"https://x.com/Rob1Ham/status/2082902437543678255"
],
[
"r",
"https://x.com/nvk/status/2082891656676700344"
],
[
"r",
"https://x.com/KLoaec/status/2082926304995762209"
],
[
"r",
"https://x.com/lopp/status/2082914565646413879"
],
[
"client",
"Amethyst"
]
],
"content": "Funds in some coldcards are getting partially swept.\n\nNo cause for concern or hyperbole at the moment. Can wait till more details emerge before considering actions. But for the prudent, here are some threads to follow:\n\n1. Rob Hamilton, CEO of AnchorWatch\n\n•Preliminary analysis:\n\nhttps://x.com/Rob1Ham/status/2082896614218203616\n\n•Also mentions that only 4% of addresses were reused:\n\nhttps://x.com/Rob1Ham/status/2082902437543678255\n\n2. NVK, head of Coinkite, maker of Coldcard\n\n•'No support or security emails to us related to this, only hear say and the Reddit mess.'\n\nhttps://x.com/nvk/status/2082902502169510263\n\n•Like many, he also speculates that it is a result of bad entropy:\n\nhttps://x.com/nvk/status/2082891656676700344\n\n3. Jameson Lopp, CSO of Casa:\n\n•Friends say only a few UTXOs were swept and not all.\n\nhttps://x.com/lopp/status/2082894501018767693\n\n•Also says the swept UTXOs are not that old:\n\nhttps://x.com/lopp/status/2082914565646413879\n\n4. Kevin Loec, CEO of Wizardsardine, maker of Liana wallet:\n\n•His hypothesis based on what he knows so far:\n\nhttps://x.com/KLoaec/status/2082926304995762209",
"sig": "2b6db3c449116c77fb8720964c0c565fef1f864004b0b9dc64c7be2f2aa3ced22e22cb86146f585e374563a21bb3270a217460254f4da888d6f06c703487c566"
}