The number of new Bitcoin addresses surged to over 330,000 last week from roughly 260,000, abruptly reversing a months-long decline, as users scrambled to move funds following a critical exploit in Coinkite's Coldcard hardware wallet. The incident has put self-custody security under fresh scrutiny.
At least 1,816 BTC — valued at approximately $116 million — was stolen across four waves of theft that began on July 30. Investigators traced the breach to a 2021 firmware bug that used a weak software-based random number generator instead of the device's dedicated hardware entropy source. Attackers were able to drastically reduce key strength and brute-force wallet seeds generated offline between March 2021 and the firmware patch. Coinkite has urged all affected users to transfer assets to newly created wallets, directly contributing to the spike in fresh addresses on the Bitcoin network.
The exploit serves as a high-profile stress test of self-custody. While self-custody eliminates counterparty risk, it does not remove implementation risk, and this event lays bare the vulnerabilities that even careful holders face. With security incidents piling up this year, the crypto community is increasingly weighing the trade-offs between self-custody, centralized exchanges, and ETF-based exposure.
On-chain watchers caution that the jump in address creation likely reflects precautionary fund relocations rather than genuine new adoption. A single user can generate multiple addresses when moving coins after a scare, so the raw address count alone cannot be taken as a sign of network growth. Confirming the full scope of the exploit and the permanent shift in self-custody behavior will require further verification and sustained on-chain data.
