Key Takeaways Coldcard-linked thefts drained bitcoin from hundreds of wallets on July 30. Coinkite says Mk3 seeds had about 40 bits of entropy instead of 128. Coldcard users must install fixed firmware and create new seeds before moving funds. According to a deep analysis from Galaxy Research, the core theft unfolded in a tightly coordinated burst lasting about 25 minutes, while broader analysis later connected roughly 1,196 addresses and as much as 1,083 bitcoin, valued at nearly $70 million, to activity spanning approximately 41 minutes. The final figures could change as investigators continue tracing transactions on the public Bitcoin blockchain. …