In late July 2026, a major security incident shocked the crypto industry, overturning public perceptions of security: Coldcard, a well-known Bitcoin hardware wallet marketed as “air-gapped signing” was systematically drained by attackers.
In just 41 minutes, attackers directly swept over 1,082 BTC from 1,196 Coldcard addresses, with losses reaching $70 million to $88.6 million. Strikingly, the attackers never physically touched any of the devices; many of the stolen wallets had been kept offline in safes for years.
Offline does not equal absolute security. This painful case proves once again: the ultimate line of defense for digital asset security does not depend on whether the device is connected to the internet, but rather whether the physical randomness during private key generation is sufficiently robust, and whether the storage and approval of keys utilize financial-grade hardware isolation.
1. Incident Review: 41-Minute “Offline Brute Force” Caused by Firmware Oversight
Many investors blindly believe that “as long as the private key is in an offline hardware device, assets are foolproof.” However, the root of the Coldcard heist lies in the fact that the fate of the private keys was determined at the moment of their creation. According to deep analysis by the Block engineering team [1] and on-chain security firms, the vulnerability stemmed from a build configuration oversight in a March 2021 Coldcard firmware update:
- RNG Downgrade: The underlying logic for hardware wallets to generate private keys involves extracting physical noise to create high-entropy True Random Numbers (TRNG). However, the flawed Coldcard firmware accidentally skipped the hardware random number generator when creating the seed, falling back to a software Pseudo-Random Number Generator (PRNG) calculated by firmware code.
- Entropy Collapse: The pseudo-random algorithm relied solely on the device’s fixed serial number and initialization time registers. This caused the private key generation space—which should have had 2^256 possibilities—to collapse to approximately 2^32 (about 4 billion possibilities).
- Offline Brute Force: For hackers, the problem space changed from “finding a needle in a haystack” to “enumerating billions of possibilities.” Attackers simply ran these 4 billion mnemonic combinations offline on their own computing equipment, derived the corresponding public key addresses, and compared them against the blockchain ledger. Once a match was found, they could broadcast the transaction on-chain and drain the funds from the offline wallet instantly.
Just like the Profanity vanity address vulnerability that caused $160 million in losses [2], and the historical incident where Lubian pool had 127,000 BTC (approx. $15 billion) stolen due to weak randomness [3] — a lack of algorithmic entropy is the most hidden and fatal poison in the crypto world.
2. The Life Cycle of a Private Key: From True Randomness to Source Security
In cryptography, random numbers are the cornerstone of all security rules. Blockchain private keys are derived from mnemonics, and mnemonics depend entirely on the initial entropy of the generated random number. Common software PRNGs are based on deterministic mathematical formulas. Once the initial seed or variables are known, the subsequent “random sequence” can be completely predicted. In contrast, true security must rely on a True Random Number Generator (TRNG), which captures unpredictable physical phenomena—such as quantum micro-noise, thermal noise, or atomic decay—to extract pure physical entropy.
Cactus Custody Private Key Generation Paradigm
To eliminate the risk of entropy collapse caused by any logic or calculation flaws at the physical source, Cactus Custody rejects the use of any software pseudo-random models. In the Cactus Custody architecture, private keys and seeds are generated directly inside Hardware Security Modules (HSM) that hold the highest security certifications. The HSM includes an industrial-grade physical entropy source (TRNG), which generates irregular and unpredictable true random numbers through physical thermal noise, ensuring that the private key generation space possesses complete cryptographic strength, mathematically sealing off any possibility of offline brute force or reverse engineering.
3. Key Custody Paradigm: Consumer-Grade Cold Wallet vs. Institutional-Grade HSM
Beyond entropy issues during generation, there is a fundamental generational gap in storage mechanisms between consumer-grade hardware wallets and institutional-grade custody.
Natural Limitations of Consumer Hardware Wallets
The primary function of ordinary consumer hardware wallets (like Ledger, Trezor, or Coldcard) is to prevent private keys from being stolen by malware on an internet-connected computer. However, for the convenience of ordinary users’ backup and migration, the private keys and 12/24 mnemonics in these devices are essentially exportable or backup-able on paper. Once a mnemonic is written down, leaked, photographed, or physically accessed, a hacker can replicate the private key on any device.
Cactus Custody: Thales Financial-Grade HSM Physical Protection
As a professional institutional digital asset custodian, Cactus Custody utilizes Thales Hardware Security Modules (HSM)—the same standard used by global top-tier financial institutions and central banks—as its underlying line of defense.
[Consumer-Grade Cold Wallet]
Private Key Gen ──► Stored on Consumer Chip ──► Mnemonic Exportable/Backup ──► Risk of Physical Exposure/Brute Force
[Cactus Custody HSM Architecture]
TRNG True Random Gen ──► Locked inside Thales HSM ──► Marked as “Non-Exportable” ──► Physical Tamper-Evident Self-Destruct
- Non-Exportable: In Cactus Custody’s Thales HSM, after private keys are generated inside the chip, they are strictly marked as non-exportable. From the moment of birth to usage, the private key physically never leaves the security boundary of the HSM.
- On-Chip Enclosed Signing: All transaction signatures are completed within the HSM’s internal secure zone. Only valid signature results are broadcasted outward. Attackers, whether via remote network or firmware extraction, cannot touch the private key itself.
- Physical Tamper-Resistance: Thales HSMs are equipped with military-grade physical protective shells. Any attempt at physical disassembly, micro-probe scanning, or environmental anomaly attacks on the HSM will instantly trigger physical protection circuits, automatically wiping and physically self-destructing all keys stored inside the chip, preventing any physical key theft.
- Multi-Signature Architecture: Adopting a multi-signature governance architecture, a single private key cannot independently authorize cold storage fund transfers. This abandons single-point decision-making and significantly reduces single points of failure and internal malicious risk.
- Independent Random Generation: The private key for each address is independently generated by the hardware TRNG built into the HSM chip, complying with FIPS 140-2/3 and NIST SP 800-90 standards. It does not use master seed derivation (like BIP32/44 HD Wallets). Keys have no mathematical correlation, eliminating “if one is broken, all is lost” batch risks, eliminating single points of failure at the source.
4. Beyond Technical Defenses: Trust Licenses and Top-Tier Compliance Audit Systems
For institutional investors and Web3 enterprises, top-tier technical architecture (HSM + TRNG) is the foundation of security, while compliant governance architecture and independent external audits constitute the complete armor for fund safety. To provide true, legally guaranteed bankruptcy remoteness and trust protection, Cactus Custody has set industry benchmarks in compliance and risk control:
- Hong Kong TCSP Trust License: Cactus Custody is licensed Trust or Company Service Provider (TCSP) in Hong Kong. This establishes our status as a qualified trust custodian at the legal level, ensuring client-custodied digital assets are legally segregated from Cactus Custody’s own assets.
- SOC 1 & SOC 2 Type II Third-Party Audits: Cactus Custody has fully passed the rigorous SOC 1 Type II and SOC 2 Type II audits by a top international accounting firm. This signifies that our asset management internal controls, risk control processes, system security, availability, and data privacy protection systems fully meet the highest audit standards of traditional finance.
- Integrated ISO Dual Certifications: Our operations team has received the ISO 27001 (Information Security Management System) and ISO 27701 (Privacy Information Management System) integrated certifications from SGS, ensuring that information security and user privacy management are aligned with global top-tier standards. [4]
Conclusion
As renowned cryptographer Bruce Schneier said: “Security is a process, not a product.” For digital asset custody, no single wallet or technology is a panacea; defense-in-depth, multi-signature governance, and risk diversification are the true end-game of security.
From blind-signing attacks to the Coldcard entropy collapse, facts have repeatedly proven: as attackers shift toward offline brute force, supply-chain poisoning, and high-dimensional social engineering, relying on retail-level consumer hardware wallets for large-scale asset management is increasingly difficult to cope with today’s security challenges.
Digital asset management is accelerating into an institutional era. Cactus Custody will continue to provide an unshakeable protective barrier for global Web3 institutions, asset managements, and high-net-worth clients by utilizing physical HSM hardware as a foundation, combined with compliant trust frameworks and SOC/ISO audit systems.
References:
【1】Block: https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware
【2】1inch: https://1inch.com/blog/post/a-vulnerability-disclosed-in-profanity-an-ethereum-vanity-address-tool
【3】Arkham: https://info.arkm.com/research/us-government-btc-seizure-lubian-chen-zhi-pig-butchering