A $70 million exploit targeting the Coldcard hardware wallet has forced a long-overdue reckoning inside the crypto security community — and it took Binance founder Changpeng Zhao, widely known as CZ, to say publicly what many security researchers have argued privately for years: no single storage device should be trusted with an entire position.
The incident, which resulted in $70 million in losses, is one of the most damaging hardware wallet exploits on record. Coldcard, long regarded as among the most security-hardened consumer devices in the Bitcoin self-custody ecosystem, built its reputation on air-gapped design and open-source firmware. That reputation has now taken a serious and very public blow. Details of the precise attack vector have not been fully disclosed, but the scale of the losses signals a vulnerability significant enough to shake even seasoned holders out of their complacency.
CZ's response was characteristically direct. Rather than offering technical specifics, the former Binance chief executive cut to the practical advice: split your funds. The argument is straightforward — concentrating holdings in any single hardware device, regardless of brand or reputation, creates a single point of catastrophic failure. Distribute assets across multiple wallets and storage mechanisms, and no single exploit can wipe out an entire position. It is the crypto equivalent of not keeping all your eggs in one basket, but the $70 million figure gives the cliché brutal new weight.
Why Hardware Wallets Are Not the Infallible Last Line of Defense
The Coldcard exploit exposes a persistent and dangerous myth in the self-custody narrative: that hardware wallets are immune to the attack surfaces that plague software solutions. They are not. Hardware devices can carry firmware vulnerabilities, supply chain compromise risks, and implementation flaws that bad actors — given sufficient motivation and resources — will eventually find and exploit. A $70 million payout provides enormous motivation.
What makes this incident particularly instructive is the type of product involved. Coldcard has historically attracted the most technically sophisticated segment of the Bitcoin self-custody market — users who deliberately chose complexity over convenience precisely because they believed it offered superior protection. If this demographic is being hit for nine figures, the implication for less security-conscious retail holders is sobering. The attack did not target an obscure or untested device; it targeted one of the category's flagship products.
This is not an argument against hardware wallets. It is an argument against treating any single security measure as a complete solution. Multi-signature setups, geographic distribution of key material, and layered storage architectures — dividing holdings between a hardware wallet, a multisig arrangement, and potentially a reputable custodian — collectively reduce the blast radius of any single failure. CZ's advice maps directly onto this framework, even if delivered in shorter form for a broader audience.
The Complexity Problem Nobody Wants to Solve
There is, of course, a reason most people do not split their funds: it is complicated. Managing keys across multiple devices and storage formats introduces new failure modes — lost seed phrases, incorrect transaction signing, inheritance and recovery complications. The security community has spent years debating where the line sits between protection and operational paralysis. Every additional layer of security is also an additional layer of potential human error.
This tension — between robust diversified security and manageable complexity — is at the heart of what the Coldcard exploit forces back into open discussion. The incident does not just raise questions about one manufacturer's firmware or hardware integrity. It raises structural questions about how the industry communicates risk to users who may have been led to believe that buying a reputable hardware device was the final step in securing their assets.
Manufacturers, wallet developers, and prominent voices in the ecosystem — CZ among them — have a collective responsibility to frame self-custody not as a destination but as an ongoing security practice. The $70 million lost in this exploit is a permanent reminder that hardware, like all technology, exists on a vulnerability timeline. What is secure today may not survive contact with tomorrow's attack tooling.
What This Means for the Market
Beyond the immediate losses, the Coldcard exploit will likely accelerate two trends already visible in the institutional segment: a growing appetite for regulated, insured custodial solutions as a complement rather than an alternative to self-custody, and increased investment in multi-signature infrastructure that distributes trust rather than concentrating it. CZ's public intervention is notable not just for its content but for its timing — a signal that the industry's most prominent figures understand that hardware wallet failures at this scale carry reputational damage for the entire asset class.
For individual holders, the message is clear and urgent. Review your storage architecture. No device, however reputable, deserves unconditional trust with a life-changing sum. Split accordingly.
Written by the editorial team — independent journalism powered by Bitcoin News.