Coldcard hack sparks a self-custody security overhaul: Cory Klippsten

WikiBit|2026-08-05

Zusammenfassung:Swan CEO Cory Klippsten said the Coldcard attack pushed bitcoin holders to rethink custody, prompting many to move funds into vaults where no single compromised device can drain assets. He mobilized his team last Thursday when attackers exploited a five-year-old firmware flaw, eventually stealing nearly 1,600 BTC (over $100 million) from about 7,300 addresses. Swan paused withdrawals for at-risk clients, sent in-app warnings, and extended migration help beyond its own users, including people Klippsten assisted at 4 a.m. while at a Paris wedding. Rather than abandoning self-custody, affected users are shifting toward safer multi-device setups, with Swan focusing on rapid response and support even for non-clients during the crisis.

Summary

Swan CEO Cory Klippsten said the Coldcard attack prompted bitcoin holders to reexamine their custody decisions.
He said he mobilized his team to help affected holders move their coins to safety, including people who were not Swan clients.
Rather than abandoning self-custody, affected users are migrating toward vaults that prevent any single compromised device from putting funds at risk.

Cory Klippsten was at a wedding in Paris when the messages started coming in.

“It was a brutal weekend for so many who lost bitcoin,” the CEO of Swan said in an interview. “I was sending messages at 4 a.m. to help someone on Pacific Time get their coins to safety.”

That was last Thursday, when attackers began draining bitcoin from thousands of Coldcard hardware wallets, exploiting a firmware flaw that had sat undetected for five years.

A defect in a March 2021 firmware update for the Coinkite-made wallet left users with private keys that were less secure than they should have been. By the time three waves of attack had rolled through, almost 1,600 BTC valued at over $100 million had been swept from around 7,300 addresses, according to Galaxy Research.

Swan, a U.S.-based platform that helps individuals buy, hold and self-custody bitcoin, paused withdrawals for at-risk clients, shipped in-app warnings and opened its migration support well beyond its user base.

“Our team dropped everything to start calling clients, and then we opened it up to anyone who needed help, whether they had ever been a Swan client or not,” Klippsten said.

Haftungsausschluss

Die Ansichten in diesem Artikel stellen nur die persönlichen Ansichten des Autors dar und stellen keine Anlageberatung der Plattform dar. Diese Plattform übernimmt keine Garantie für die Richtigkeit, Vollständigkeit und Aktualität der Artikelinformationen und haftet auch nicht für Verluste, die durch die Nutzung oder das Vertrauen der Artikelinformationen verursacht werden.