Coldcard Exploit Tops $100M, July Crypto Theft Hits $247M

Retail investors who hesitated on self-custody now have fresh reasons to wait. Institutions evaluating digital asset exposures factor in security risk more heavily after a breach of this scale. Some companies in the industry have started internal security audits in response. There is no coordinated industry-wide effort, and each firm is running its own review.

The silence from Coldcard is eroding trust among its core user base. Technically sophisticated users expect transparency and technical details. Without that, speculation fills the gap, and anxiety spreads across the broader self-custody community.

The exploit’s path remains unclear. Was it a targeted attack or a broadly exploitable flaw? Can the vulnerability be reproduced? Without answers, hardware wallets–long marketed as the safest storage option–now face the same scrutiny software wallets and exchanges have endured for years.

July’s $247 million loss is second only to one other month in 2026 that saw even higher theft volumes.