Coldcard has warned owners of its Mk3 hardware wallet to move their funds, urging affected Coldcard Mk3 users to move funds after security researchers began investigating a reported 594 BTC drain. The situation is being treated as an active investigation rather than a resolved case.
- The warning: Coinkite, the maker of Coldcard, has advised Mk3 device owners to relocate their holdings as a precaution.
- The trigger: Researchers are examining a reported drain of roughly 594 BTC.
- The status: The matter remains under investigation, and key details are not yet confirmed.
Why Coldcard Is Warning Mk3 Users to Move Funds
Coinkite issued guidance advising owners of the older Mk3 hardware wallet to move their bitcoin, according to the company’s own advisory. The notice is directed specifically at the Mk3 generation of the device. For related coverage, see What Is a Stablecoin? Peg, Reserves, Redemption, and How They Work.
The warning follows reporting that experts are looking into a large bitcoin theft, as covered by The Block. At this stage the company is framing its message as a precaution while the review is ongoing. For related coverage, see USDT vs USDC in 2026: Safety, Liquidity, Reserves, and Use Cases.
What is confirmed is the warning itself and the fact that an investigation is underway. The precise cause of the drain, and whether every Mk3 unit is affected, has not been established in the available reporting. For related coverage, see Top 7 Stablecoins for Enterprise Payments in 2026.
What Investigators Are Looking At in the Drain
The figure at the center of the case is a reported drain of about 594 BTC, which researchers are actively examining. Reporting frames the loss as occurring rapidly rather than over an extended period. For related coverage, see MoonPay PayBox Brings Crypto Payments to ChatGPT.
It is important to separate what is verified from what is not. The size of the reported loss and the existence of an investigation are documented, but the exact mechanism, the identity of any attacker, and the full list of impacted devices remain open questions.
Bitcoin security researcher Jameson Lopp weighed in publicly on the incident, commenting on the case via X. His involvement underscores that the matter is being scrutinized by outside experts, not only by the manufacturer.
For Mk3 owners, the relevance is direct: the investigation concerns the specific hardware generation they hold, which is why the guidance to move funds is targeted at that model rather than the broader wallet market. This mirrors the caution seen in other recent Bitcoin-related security scares, such as when the China Business Journal warned firms over a Bitcoin extortion scam using its name.
What Coldcard Mk3 Users Should Do Next
The core action communicated by Coinkite is straightforward: Mk3 users are being told to move their funds. Owners weighing next steps should treat that instruction as the starting point.
Before acting, verify the guidance directly through Coinkite’s official channels rather than relying on secondhand summaries. Because the investigation is ongoing, official instructions may be updated as more is learned.
This is not financial advice, and the details of the incident are still being established. The practical takeaway from the current reporting is limited but clear: affected Mk3 owners should confirm the official warning and follow the manufacturer’s stated precautions.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
