A critical security flaw in Coldcard cryptocurrency hardware wallets has been exploited by hackers, resulting in the theft of over $130 million in cryptocurrency. The vulnerability, which affects offline hardware wallets, has been leveraged to drain victims' wallets, with blockchain monitoring firms tracking the substantial losses. The bug, which has not been assigned a CVE number, highlights the risks associated with relying on supposedly secure offline storage solutions. As the cryptocurrency industry continues to grapple with security concerns, this incident serves as a stark reminder of the importance of rigorous testing and validation of hardware wallets. The significant financial losses incurred by victims underscore the need for enhanced security measures to protect against such exploits1. This incident matters to practitioners because it demonstrates the potential for significant financial losses due to security vulnerabilities in hardware wallets, emphasizing the need for robust security protocols to safeguard cryptocurrency assets.