Uploaded August 2026 | Updated September 2026, 2 weeks ago
📢 Bits + Bips has its own channel now — full episodes here: youtube.com/@Bitsandbips
A firmware bug quietly introduced into Coldcard hardware wallets in 2021 has let attackers drain an estimated 1,600 to 2,000 bitcoin, over $100 million, from cold storage addresses that sat untouched for years.
Galaxy Digital's Alex Thorn has been tracing the exploit in real time, and in this clip he breaks down exactly how the random number generator meant to secure private keys "failed silently" into "way too weak entropy," and lays out the wave-by-wave forensic trail he is using to track the attacker.
Alex Thorn identifies three confirmed attack waves and a possible fourth, and Chris Perkins makes the case that even a "trustless, permissionless" system still requires trusting something, in this case, a hardware wallet's own firmware.
Hosts:
👉 Austin Campbell - Host of Bits + Bips, Founder of Zero Knowledge Group, and Adjunct Professor at NYU Stern - https://x.com/austincampbell
👉 Ram Ahluwalia - Co-host of Bits + Bips and CEO of Lumida - https://x.com/ramahluwalia
👉 Chris Perkins - Co-host of Bits + Bips and Head of Franklin Crypto - https://x.com/perkinscr97
Guest:
👉 Alex Thorn - Head of Research at Galaxy Digital and host of Galaxy Brains - https://x.com/intangiblecoins
This clip is from a longer conversation on the Coldcard hack, U.S. AI guardrails, and the case for self custody. Full episode here. youtu.be/0oYZGw2DSj0?si=TwubhLQ35L8cXyG_
We go live every Monday at 4:30pm ET. Subscribe to catch it live.
👉 Cape: Your biggest crypto vulnerability isn't your wallet, it's your phone number. Cape is America's privacy-first mobile carrier that rotates your SIM identity daily and blocks SIM swaps before they happen. Get 33% off your first six months at cape.co/unchained (use code: UNCHAINED).
Chapters
🔐 00:00 Coldcard's reputation as Bitcoin's gold standard hides a deep systemic flaw
🎲 03:42 How a 2021 firmware update let key generation fail silently into weak entropy
🕵️ 09:56 Alex Thorn traces three confirmed attack waves, and a possible fourth
🤝 14:05 'They trusted Coldcard to do the right thing': what broke when a hardware wallet failed
_______________________________________________________
#bitcoin #ethereum #crypto #cryptocurrencies
_______________________________________________________
Subscribe to our channel!
Website → unchainedcrypto.com
Unchained Daily Newsletter (FREE!)→ unchainedcrypto.beehiiv.com/subscribe
Unchained X → https://x.com/unchained_pod
Apple → podcasts.apple.com/us/podcast/id1123922160?ls=1
Spotify → open.spotify.com/show/1cJrrfGY1SKBIRn5noKSAf?si=6SI4qIcRTEO7EhOe0V9n4w
RSS Feed → https://feeds.megaphone.fm/LSHML4761942757
Unchained: Your no-hype resource for all things crypto!
📢 Bits + Bips has its own channel now — full episodes here: youtube.com/@Bitsandbips
A firmware bug quietly introduced into Coldcard hardware wallets in 2021 has let attackers drain an estimated 1,600 to 2,000 bitcoin, over $100 million, from cold storage addresses that sat untouched for years.
Galaxy Digital's Alex Thorn has been tracing the exploit in real time, and in this clip he breaks down exactly how the random number generator meant to secure private keys "failed silently" into "way too weak entropy," and lays out the wave-by-wave forensic trail he is using to track the attacker.
Alex Thorn identifies three confirmed attack waves and a possible fourth, and Chris Perkins makes the case that even a "trustless, permissionless" system still requires trusting something, in this case, a hardware wallet's own firmware.
Hosts:
👉 Austin Campbell - Host of Bits + Bips, Founder of Zero Knowledge Group, and Adjunct Professor at NYU Stern - https://x.com/austincampbell
👉 Ram Ahluwalia - Co-host of Bits + Bips and CEO of Lumida - https://x.com/ramahluwalia
👉 Chris Perkins - Co-host of Bits + Bips and Head of Franklin Crypto - https://x.com/perkinscr97
Guest:
👉 Alex Thorn - Head of Research at Galaxy Digital and host of Galaxy Brains - https://x.com/intangiblecoins
This clip is from a longer conversation on the Coldcard hack, U.S. AI guardrails, and the case for self custody. Full episode here. youtu.be/0oYZGw2DSj0?si=TwubhLQ35L8cXyG_
We go live every Monday at 4:30pm ET. Subscribe to catch it live.
👉 Cape: Your biggest crypto vulnerability isn't your wallet, it's your phone number. Cape is America's privacy-first mobile carrier that rotates your SIM identity daily and blocks SIM swaps before they happen. Get 33% off your first six months at cape.co/unchained (use code: UNCHAINED).
Chapters
🔐 00:00 Coldcard's reputation as Bitcoin's gold standard hides a deep systemic flaw
🎲 03:42 How a 2021 firmware update let key generation fail silently into weak entropy
🕵️ 09:56 Alex Thorn traces three confirmed attack waves, and a possible fourth
🤝 14:05 'They trusted Coldcard to do the right thing': what broke when a hardware wallet failed
_______________________________________________________
#bitcoin #ethereum #crypto #cryptocurrencies
_______________________________________________________
Subscribe to our channel!
Website → unchainedcrypto.com
Unchained Daily Newsletter (FREE!)→ unchainedcrypto.beehiiv.com/subscribe
Unchained X → https://x.com/unchained_pod
Apple → podcasts.apple.com/us/podcast/id1123922160?ls=1
Spotify → open.spotify.com/show/1cJrrfGY1SKBIRn5noKSAf?si=6SI4qIcRTEO7EhOe0V9n4w
RSS Feed → https://feeds.megaphone.fm/LSHML4761942757
Unchained: Your no-hype resource for all things crypto!
