Coldcard: $38M BTC Stolen via Mk3 Firmware Flaw

Coinkite confirmed an attacker drained 594 BTC (~$38M) from roughly 500 single-signature Coldcard wallets in a 25-minute sweep by exploiting a flaw in key generation on Mk3 devices running firmware 4.0.1 or later.

The Canadian firm, founded in 2012 and known for air-gapped Bitcoin hardware, stated early analysis shows Mk4, Q and Mk5 models remain unaffected; the attacker consolidated 562 BTC into one address that has not moved since.

Bitcoin trades at $64331.36 inside the Bollinger Bands with upper resistance at $65072.77 and lower support at $63166.66; the 50-EMA at $64461.68 acts as immediate resistance while the 200-EMA at $63958.35 offers deeper support, and the neutral RSI at 49.35 paired with a MACD golden cross at 21.85 points to consolidation before any decisive directional move.