Hardware wallet maker Coinkite has issued a stark warning to users of its Coldcard Mk3 device, following reports that roughly 594 BTC have been stolen in a series of incidents. The company cautions that "funds may be at risk" for those still relying on the older model, urging immediate action to secure assets.

What's Happening with Coldcard Mk3?

Coinkite's alert comes amid growing concerns over the security of the Coldcard Mk3, a popular hardware wallet known for its offline, air-gapped approach to storing private keys. The reported theft of hundreds of bitcoins has sent ripples through the crypto community, as users question the integrity of a device once considered highly secure.

According to the warning, the issue appears to affect only the Mk3 model, not the newer Mk4. Coinkite has not yet disclosed the exact nature of the vulnerability, but the company's language suggests a serious flaw that could compromise private keys if certain conditions are met.

What Should Mk3 Users Do?

Coinkite advises all Coldcard Mk3 owners to transfer their funds to a secure wallet immediately. The company recommends using the latest firmware and, ideally, moving to the Mk4 or an alternative hardware wallet. For those who cannot upgrade right away, moving funds to a software wallet or exchange may be a temporary stopgap, though that carries its own risks.

  • Move your BTC: Transfer all assets off the Mk3 as soon as possible.
  • Update firmware: If you must continue using the device, ensure it runs the latest version.
  • Consider a replacement: The Mk4 or other reputable hardware wallets are safer options.

The Scope of the Thefts

While Coinkite has not confirmed the specifics of the thefts, reports indicate that approximately 594 BTC—worth tens of millions of dollars at current prices—have been stolen from Mk3 users. The exact timeline and method remain unclear, but the incidents appear to have occurred over a period, with users discovering unauthorized transactions from their wallets.

This incident highlights the ongoing risks in the crypto space, even for users who take extra precautions. Hardware wallets are often touted as the gold standard for security, but no device is infallible. The Coldcard Mk3 has been on the market for years, and this warning suggests that its security may have been compromised in a way that was previously unknown.

Community Reaction and Next Steps

The crypto community has reacted with alarm, with many expressing concern over the implications for hardware wallet security. Some users have reported losing significant amounts, while others are scrambling to check their own devices. Coinkite's warning has also reignited debates about the best practices for storing crypto, particularly for long-term holders.

Security experts recommend that users not panic but take proactive measures. "This is a reminder that even the most secure devices can have vulnerabilities," said one analyst. "The key is to stay informed and act quickly when a warning is issued."

What to Do Next

If you own a Coldcard Mk3, do not wait. Transfer your funds to a secure wallet immediately. Keep an eye on Coinkite's official channels for updates and further instructions. In the meantime, consider diversifying your storage methods to reduce risk.

Key Takeaways

  • Coinkite has warned Coldcard Mk3 users that their funds may be at risk.
  • Reports indicate that 594 BTC have been stolen, though details are still emerging.
  • Users should move funds off the Mk3 immediately and consider upgrading to the Mk4.
  • This incident underscores the importance of staying vigilant and responsive to security alerts.

As the situation develops, we will continue to provide updates. For now, the message is clear: if you use a Coldcard Mk3, act now to protect your assets.