Skip to main content
AVOID.NET

v7 → v8

Scores

trust_score1 → 0
severity_base— → —
score_modifier-13.36 → -5.88

Sections

The Vulnerability: A 2021 Build Error, Not a Design Choice

unchanged

Affected Firmware and Devices

unchanged

Attack Waves, Scale and Timing

unchanged

Multiple, Possibly AI-Assisted Attackers

unchanged

Coinkite's Response and Remediation

unchanged

Allegation: Prior Warning to Coinkite's CTO (Disputed, Unconfirmed)

unchanged

Legal Exposure: Ontario Class Action and Other Threats

unchanged

Community and Expert Reaction

unchanged

Broader Context: Self-Custody and Supply-Chain Risk

unchanged

Timeline events

No timeline changes.

Accepted submissions

+ addedurlincriminating{"url":"https://www.trmlabs.com/resources/blog/the-largest-hardware-wallet-exploit-of-2026-inside-the-usd-116-million-coldcard-hack","kind":"url"}
+ addedurlincriminating{"url":"https://techcrunch.com/2026/08/04/hackers-steal-over-130-million-by-exploiting-bug-in-offline-hardware-wallets/","kind":"url"}
+ addedurlincriminating{"url":"https://fortune.com/2026/08/03/bitcoin-owners-116-million-hack-coldcard-coinkite-exploit/","kind":"url"}

Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.

v7 hash: 7780f2150ef293ef98367e40bf7498328033575a80fb17c313dd286730354d0e
v8 hash: BDobs9KF97SFbBeVRDQPwnJQdJnhz5UN3vjnkEgH5MhB