Coldcard Flaw Drains 594 BTC as Bitcoin Ignores Kospi Rebound

A security flaw in Coldcard hardware wallets swept approximately 594 bitcoin worth roughly $38 million from around 500 wallets on Thursday, July 31, 2026, according to CoinDesk — and bitcoin's price near $64,300 barely flinched., according to CoinDesk — and bitcoin's price near $64,300 barely flinched. That same indifference extended to South Korea's Kospi staging one of its sharpest single-day surges on record, rising as much as 17%, yet crypto markets sat out the entire rally.

Bitcoin's Stubborn Decoupling from Risk Assets

The Kospi rebound, detailed in CoinDesk's markets coverage, was led by Samsung and SK Hynix, both of which jumped more than 23%, alongside Taiwan Semiconductor rising 10%. The move followed the largest rally in U.S. chip stocks in more than a year, with the Nasdaq 100 snapping a six-day losing streak. Amazon rose nearly 10% after hours on strong cloud earnings. Yet bitcoin held near $64,300 through it all — spiking briefly to $65,300 in early Asian hours before surrendering that gain within 60 minutes.

The weekly picture tells a harder story. Hyperliquid's HYPE token is down 5% over seven sessions. Solana and XRP are each off 3%. Bitcoin itself has shed 2% on the week. Ether and dogecoin are the only major assets posting weekly gains, each up 1%. On July 31, Ether traded at $1,907, XRP at $1.08, solana at $74, and dogecoin at $0.07, with roughly $27 billion changing hands in bitcoin and $7 billion in ether. BNB was the standout exception, up 3% on the day to $590 and the only major holding a meaningful weekly gain.

What this pattern reveals is a structural shift in how bitcoin is correlating with risk assets. According to CoinDesk's reporting, bitcoin tracked semiconductors closely through July — rising and falling with the chip trade. It held through last Thursday's $797 billion drop in U.S. megacap technology. And it has now sat out the rebound as well. The correlation is present enough to register but too weak to produce proportional moves in either direction — a pattern consistent with a market operating under significant distribution pressure.

The Coldcard Exploit and What It Signals for On-Chain Security

The Coldcard hardware wallet breach is the more operationally significant development for bitcoin holders. CoinDesk reported that a flaw in Coldcard's key generation process allowed hackers to drain approximately 594 BTC from around 500 wallets in a single 25-minute sweep. The funds, worth roughly $38 million at prevailing prices, were swept from around 500 wallets without registering any impact on bitcoin's price.

The exploit targeting key generation rather than transaction signing is notable — it suggests the vulnerability existed at the point of wallet creation, meaning affected wallets may have been compromised long before any funds moved. For users of older Coldcard models, this raises the immediate question of whether keys generated on vulnerable firmware should be treated as permanently exposed, regardless of subsequent updates.

That the loss of 594 BTC made no measurable impression on price is itself an on-chain signal. Sell pressure from a single coordinated sweep of that magnitude would normally leave a trace in short-term order book data. Its absence suggests either the stolen funds were not immediately liquidated on spot markets, or existing bid depth near $64,000 absorbed the flow without disruption. Either interpretation points to a market with more structural support at current levels than its weekly decline implies. For deeper context on bitcoin market cycles and what price stagnation phases typically precede, see our guide on Crypto Market Cycles Explained.

Macro Context: Yen, Treasuries, and the Semiconductor Trade

Beyond equities, the macro backdrop shifted in ways that historically move bitcoin. The yen weakened on July 31, giving back part of Thursday's gain — its largest single-day move against the dollar in more than two years — after the Bank of Japan left interest rates unchanged, as economists had expected. Japanese monetary policy intervention had been a catalyst for a sharp two-week selloff across Asian equities; the BOJ's decision to hold rates removed one source of volatility but also confirmed that the yen's earlier strength was temporary.

Treasuries rose alongside the dollar, and oil extended its decline. This combination — stronger dollar, rising bonds, weaker commodities — is typically a risk-off signal, yet equities rallied hard. Bitcoin sat between these two impulses, neither confirming the equity rebound nor breaking down with commodities. The Fear and Greed Index reading of 25 (Extreme Fear) reflects the accumulated sentiment damage from two weeks of selling, and that reading has not shifted despite Friday's equity bounce — consistent with crypto markets processing a different and slower information cycle than equities.

Also worth noting in the macro context for bitcoin holders: Strategy booked an $8.2 billion Q2 loss driven by bitcoin's price decline, representing one of the largest single-quarter unrealized losses for any publicly listed bitcoin treasury vehicle. Strategy's continued accumulation strategy means its cost basis now sits under ongoing scrutiny from institutional counterparties watching whether the position will face forced reduction at lower price levels.

Background: Hardware Wallet Risks and Cost-Basis Implications

The Coldcard exploit arrives at a moment when cold storage is under renewed examination across the industry. Hardware wallets have long been positioned as the highest-security tier of bitcoin custody, and a key-generation flaw undermines that assumption at its foundation. Investors with significant holdings across multiple hardware wallet brands should treat this event as a prompt to audit whether their devices are running current, uncompromised firmware — and whether funds generated on older models need to be migrated to freshly generated keys on verified hardware.

For investors managing larger positions across multiple acquisition dates, the Coldcard incident also has a secondary implication: if stolen funds are eventually recovered or traced, the tax treatment of lost or stolen cryptocurrency can depend on how the original cost basis was calculated. For guidance on cost-basis methodologies relevant to this scenario, see our guide on FIFO vs Specific Identification — Choosing Your Crypto CGT Method. For broader investment intelligence on navigating multi-asset portfolios through periods of volatility, WealthWatchPro macro market analysis provides relevant context.

What to Watch Going Into August

Three specific developments deserve close attention in the sessions ahead. First, whether Coldcard releases a formal post-mortem confirming the scope of the Mk3 vulnerability and whether any subsequent sweeps of additional wallets are detected on-chain. Second, whether the 594 BTC stolen in Thursday's exploit begins moving through mixing protocols or onto exchanges — that flow, if it materialises, would be visible on-chain and could add localised sell pressure at specific price levels.

Third, Coinbase's 5% stock decline after missing second-quarter revenue estimates is a forward indicator for retail crypto trading volumes. Coinbase's Q2 miss points to sustained compression in transaction fee revenue — a signal that retail participation remains thin at current price levels. If the Kospi-led equity rebound extends into U.S. trading next week and draws risk appetite back into speculative assets, bitcoin's ability to reclaim $65,300 — its intraday high from early Asian hours on July 31 — would be the first meaningful technical confirmation that sentiment is shifting. Until then, the on-chain picture remains one of low conviction in both directions, with miner behaviour and exchange inflows the key metrics to monitor for any early sign of directional commitment.