Coverage of "Firmware vulnerability" on Cryptopasta: the stories and the context behind them.
A Bitcoin activist destroyed his ColdCard Q in protest after the device's firmware vulnerability left users without passphrases at risk. Coinkite acknowledged the flaw and released a patch, but the incident raised questions about how hardware wallet security gets vetted.
August 4, 2026