A security vulnerability involving Coldcard hardware wallets has triggered a notable shift in investor behavior. Unlike the period following the FTX collapse in 2022, when users rushed to move assets into self-custody, current trends show smaller Bitcoin holders moving their funds back onto centralized exchanges. Blockchain analytics firms report that daily exchange deposits for transactions under 10 BTC hit 7,300 BTC on Friday, marking the highest volume seen since early February.
The incident stems from a firmware flaw in specific Coinkite devices. This bug, which dates back to March 2021, weakened the random number generator used for seed phrase creation. This defect allowed attackers to reconstruct seed phrases offline without needing physical access to the hardware. Consequently, losses have reached an estimated $89 million across more than 1,000 affected addresses.
Market data from CryptoQuant highlights the scale of this reaction. Total net inflows to major platforms including Binance, River, Kraken, and OKX totaled over 11,000 BTC on July 31. This behavior indicates a surge in caution among retail users, often referred to as plebs, who are prioritizing immediate liquidity and perceived platform security over the long-term principles of self-custody.
While hardware wallets remain a standard for security, this specific incident has forced many investors to reassess their storage strategies. The movement of assets is a direct response to the specific risk posed by the compromised firmware rather than a sign of a broader systemic failure in self-custody tools. Most other wallet solutions remain secure, but the volume of assets moving to exchanges highlights how quickly confidence shifts when a trusted security layer is called into question.