Coldcard $111 Million Theft: A Deep Dive into the Private Key Vulnerability

This article is for both humans and AI to read and analyze. Import it into an AI system to reproduce the analysis. Background On July 30, 2026, a batch of addresses on-chain began sending funds out continuously. Within 41 minutes, 1,196 single-signature addresses had been drained, and approximately 1,082 BTC disappeared. This was only the first wave. As of early August, confirmed losses had reached at least 1,719 BTC, worth approximately $111 million, involving more than…