The Craziest Bitcoin Heist Is Happening Right Now...
Source: YouTube · SomeOrdinaryGamers · published Aug 4, 2026 · 20:12
Approximately $100 million in Bitcoin was stolen from Coldcard hardware wallet users due to a deterministic entropy vulnerability that allowed hackers to predict seed phrases without physical access 2:20.
Key Takeaways:
• The exploit targeted Coldcard Mark 2 and Mark 3 wallets (firmware 4.0.1 to 4.1.9) where the hardware RNG was disabled, forcing a predictable software fallback for seed generation 3:05.
• Over 1,000 wallets were compromised, including funds from users who stored devices offline in safe deposit boxes, such as Jonathan Goodman who lost $1.6 million 2:10.
• Investigators suspect the vulnerability was identified or exploited using Large Language Models (LLMs), which can rapidly analyze code for security flaws 16:45.
• Recovery is highly unlikely as stolen funds are being laundered through mixing services and casinos to obscure the transaction trail 11:40.
This incident underscores that hardware wallets relying on flawed entropy sources are vulnerable to remote exploitation, necessitating immediate migration to secure, updated devices.
Sources:
- 02:20 Introduction of the $100 million theft and Coldcard vulnerability
- 03:05 Specifics of the exploit affecting Mark 2 and Mark 3 wallets
- 02:10 Impact on victims, including offline storage failures
- 16:45 Speculation on LLM involvement in identifying the exploit
- 11:40 Details on fund laundering and recovery challenges
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello guys and gals, me Mutahar. What if I gave you guys 35.4 million US dollars right now? What would you do with that money, okay? Don't don't don't shut up the comment sections. That was a joke. I can only imagine what what you guys would do. But at the end of the day, >> [laughter] >> what if I told you over the weekend you guys were just chilling out playing video games having a good time, there was a near $100 million theft of people's Bitcoin. Now, I'm somebody that like, you know, if I were to tell you about like my history with Bitcoin, you know, when I started deep web browsing, I remember coming across Bitcoins and I was like, you know what? I think I'll just buy every, you know, I'll think I'll just buy like coins every so often, right? Like I would upload a deep web video. I'm…