"This is for everyone who got robbed by bad code," Adam tweeted as he livestreamed the destruction of his ColdCard Q on August 2, 2026. The Denver-based Bitcoin user, known online as @denverbitcoin, didn't just trash the device. He shot it. The act was pure theater, but the vulnerability it protested was anything but symbolic.
Coinkite's flagship hardware wallet had a critical weakness lurking in its seed generation firmware. When users let the device automatically create a recovery phrase, it pulled randomness from a pool limited to just 32 bytes of entropy instead of the full range it should have used. That meant seeds generated this way were theoretically easier to brute-force than buyers thought they were getting. The damage split cleanly along one line: users who had set up a passphrase, that optional 25th word sitting on top of the standard 24-word recovery phrase, stayed safe. Everyone else was exposed. Coinkite acknowledged the flaw, patched the firmware, and told affected users to generate completely new seeds. The hardware itself was fine. Only the software that created the keys had failed.
Adam's shooting wasn't really about one device. He framed it as solidarity with everyone whose security assumptions had been quietly broken, and he took aim at a broader failure: influencers and educators who had recommended ColdCard without pushing passphrase adoption or stress-testing the underlying security hard enough. The flaw slipped past audits that cost barely anything. Coinkite founder NVK absorbed most of the criticism on X, though mainstream crypto media largely stayed quiet. The conversation stayed bottled up in Bitcoin's corner of the internet, which may have mattered less than the fact that it happened at all. Hardware wallets sell themselves on a single promise: your keys stay offline, unreachable, untouchable. When that promise cracks, even once, the market notices.
This material is informational only and does not constitute financial or security advice. Always conduct your own research before trusting any custody solution with your assets.
