Coldcard Firmware Debuts After $114M Theft, AI Finds Bugs
Coldcard ships firmware after $114 million bitcoin theft; says AI helped catch more bugs
Coldcard, the maker of a popular Bitcoin hardware wallet, has shipped a new firmware release in the aftermath of a reported $114 million bitcoin theft. The company said the incident prompted additional scrutiny and that it used AI-assisted tools to identify and fix more bugs before shipping.
The update matters because hardware wallet firmware is the security-critical layer that governs how private keys are created, stored, and used to sign transactions. When large thefts occur—whether tied to devices, software, or user workflows—wallet makers typically face pressure to demonstrate that their systems are resilient and that updates meaningfully reduce risk.
Coldcard’s comments also reflect a broader trend across security engineering: incorporating AI into testing and code review. Used carefully, AI can help teams surface edge cases and coding mistakes more quickly, but it does not replace conventional security practices such as manual review, reproducible builds, and ongoing vulnerability research.
The company did not provide further detail in the provided information on how the theft occurred, whether it involved Coldcard users directly, or what specific vulnerabilities or fixes were included in the new firmware. Even so, the episode underscores how quickly security narratives can shift in crypto—where custody tools must be updated, audited, and communicated clearly when high-value losses draw attention to potential weaknesses across the ecosystem.
